PageRenderTime 65ms CodeModel.GetById 21ms RepoModel.GetById 1ms app.codeStats 1ms

/wp-content/plugins/membership/membershipincludes/classes/membershippublic.php

https://github.com/bfay/maniacal-kitten
PHP | 2477 lines | 1638 code | 607 blank | 232 comment | 464 complexity | 5a04dacf3c688e53507308dc1d333a8c MD5 | raw file
Possible License(s): GPL-2.0, GPL-3.0, AGPL-1.0, LGPL-3.0, LGPL-2.1 
    

  1. <?php

    2. 

  2. if(!class_exists('membershippublic')) {

    3. 

  3. 

    4. 

  4. 	class membershippublic {

    5. 

  5. 

    6. 

  6. 		var $build = 2;

    7. 

  7. 

    8. 

  8. 		var $db;

    9. 

  9. 

    10. 

  10. 		var $tables = array('membership_levels', 'membership_rules', 'subscriptions', 'subscriptions_levels', 'membership_relationships');

    11. 

  11. 

    12. 

  12. 		var $membership_levels;

    13. 

  13. 		var $membership_rules;

    14. 

  14. 		var $membership_relationships;

    15. 

  15. 		var $subscriptions;

    16. 

  16. 		var $subscriptions_levels;

    17. 

  17. 

    18. 

  18. 		function __construct() {

    19. 

  19. 

    20. 

  20. 			global $wpdb;

    21. 

  21. 

    22. 

  22. 			$this->db =& $wpdb;

    23. 

  23. 

    24. 

  24. 			foreach($this->tables as $table) {

    25. 

  25. 				$this->$table = membership_db_prefix($this->db, $table);

    26. 

  26. 			}

    27. 

  27. 

    28. 

  28. 			add_action('plugins_loaded', array(&$this, 'load_textdomain'));

    29. 

  29. 

    30. 

  30. 			// Set up Actions

    31. 

  31. 			add_action('init', array(&$this, 'initialise_plugin'), 1 );

    32. 

  32. 			add_filter('query_vars', array(&$this, 'add_queryvars') );

    33. 

  33. 			add_action('generate_rewrite_rules', array(&$this, 'add_rewrites') );

    34. 

  34. 

    35. 

  35. 			// Add protection

    36. 

  36. 			add_action('parse_request', array(&$this, 'initialise_membership_protection'), 2 );

    37. 

  37. 			// Download protection

    38. 

  38. 			add_action('pre_get_posts', array(&$this, 'handle_download_protection'), 3 );

    39. 

  39. 

    40. 

  40. 			// Payment return

    41. 

  41. 			add_action('pre_get_posts', array(&$this, 'handle_paymentgateways'), 1 );

    42. 

  42. 

    43. 

  43. 			// add feed protection

    44. 

  44. 			add_filter('feed_link', array(&$this, 'add_feed_key'), 99, 2);

    45. 

  45. 

    46. 

  46. 			// Register

    47. 

  47. 			add_filter('register', array(&$this, 'override_register') );

    48. 

  48. 

    49. 

  49. 			// Ultimate Facebook Compatibility

    50. 

  50. 			add_filter( 'wdfb_registration_redirect_url', array(&$this, 'wdfb_registration_redirect_url') );

    51. 

  51. 

    52. 

  52. 			// Level shortcodes filters

    53. 

  53. 			add_filter( 'membership_level_shortcodes', array(&$this, 'build_level_shortcode_list' ) );

    54. 

  54. 			add_filter( 'membership_not_level_shortcodes', array(&$this, 'build_not_level_shortcode_list' ) );

    55. 

  55. 

    56. 

  56. 		}

    57. 

  57. 

    58. 

  58. 		function wdfb_registration_redirect_url($url) {

    59. 

  59. 			global $M_options;

    60. 

  60. 			$url = get_permalink($M_options['registration_page']);

    61. 

  61. 			return $url;

    62. 

  62. 		}

    63. 

  63. 

    64. 

  64. 		function membershippublic() {

    65. 

  65. 			$this->__construct();

    66. 

  66. 		}

    67. 

  67. 

    68. 

  68. 		function load_textdomain() {

    69. 

  69. 

    70. 

  70. 			$locale = apply_filters( 'membership_locale', get_locale() );

    71. 

  71. 			$mofile = membership_dir( "membershipincludes/languages/membership-$locale.mo" );

    72. 

  72. 

    73. 

  73. 			if ( file_exists( $mofile ) )

    74. 

  74. 				load_textdomain( 'membership', $mofile );

    75. 

  75. 

    76. 

  76. 		}

    77. 

  77. 

    78. 

  78. 		function initialise_plugin() {

    79. 

  79. 

    80. 

  80. 			global $user, $member, $M_options, $M_Rules, $wp_query, $wp_rewrite, $M_active, $bp;

    81. 

  81. 

    82. 

  82. 			if(defined('MEMBERSHIP_GLOBAL_TABLES') && MEMBERSHIP_GLOBAL_TABLES === true ) {

    83. 

  83. 				if(function_exists('get_blog_option')) {

    84. 

  84. 					$M_options = get_blog_option(MEMBERSHIP_GLOBAL_MAINSITE, 'membership_options', array());

    85. 

  85. 				} else {

    86. 

  86. 					$M_options = get_option('membership_options', array());

    87. 

  87. 				}

    88. 

  88. 			} else {

    89. 

  89. 				$M_options = get_option('membership_options', array());

    90. 

  90. 			}

    91. 

  91. 

    92. 

  92. 			// Check if the membership plugin is active

    93. 

  93. 			$M_active = M_get_membership_active();

    94. 

  94. 

    95. 

  95. 			// Create our subscription page shortcode

    96. 

  96. 			add_shortcode('subscriptionform', array(&$this, 'do_subscription_shortcode') );

    97. 

  97. 			add_shortcode('accountform', array(&$this, 'do_account_shortcode') );

    98. 

  98. 			add_shortcode('upgradeform', array(&$this, 'do_upgrade_shortcode') );

    99. 

  99. 			add_shortcode('renewform', array(&$this, 'do_renew_shortcode') );

    100. 

  100. 

    101. 

  101. 			// Moved extra shortcodes over to the main plugin for new registration forms

    102. 

  102. 			add_shortcode('subscriptiontitle', array(&$this, 'do_subscriptiontitle_shortcode') );

    103. 

  103. 			add_shortcode('subscriptiondetails', array(&$this, 'do_subscriptiondetails_shortcode') );

    104. 

  104. 			add_shortcode('subscriptionprice', array(&$this, 'do_subscriptionprice_shortcode') );

    105. 

  105. 			add_shortcode('subscriptionbutton', array(&$this, 'do_subscriptionbutton_shortcode') );

    106. 

  106. 

    107. 

  107. 			do_action('membership_register_shortcodes');

    108. 

  108. 

    109. 

  109. 			// Check if we are on a membership specific page

    110. 

  110. 			add_filter('the_posts', array(&$this, 'check_for_membership_pages'), 1);

    111. 

  111. 			// Check for subscription shortcodes - and if needed queue styles

    112. 

  112. 			add_filter('the_posts', array(&$this, 'add_subscription_styles'));

    113. 

  113. 

    114. 

  114. 			$user = wp_get_current_user();

    115. 

  115. 			if(!method_exists($user, 'has_cap') || $user->has_cap('membershipadmin') || $M_active == 'no') {

    116. 

  116. 				// Admins can see everything

    117. 

  117. 				return;

    118. 

  118. 			}

    119. 

  119. 

    120. 

  120. 			if( $M_active == 'no' ) {

    121. 

  121. 				// The plugin isn't active so just return

    122. 

  122. 				return;

    123. 

  123. 			}

    124. 

  124. 

    125. 

  125. 			if(!method_exists($user, 'has_cap') || $user->has_cap('membershipadmin')) {

    126. 

  126. 				// Admins can see everything - unless we have a cookie set to limit viewing

    127. 

  127. 				if(empty($_COOKIE['membershipuselevel']) || $_COOKIE['membershipuselevel'] == '0') {

    128. 

  128. 					return;

    129. 

  129. 				}

    130. 

  130. 			}

    131. 

  131. 

    132. 

  132. 			// More tags

    133. 

  133. 			if( isset($M_options['moretagdefault']) && $M_options['moretagdefault'] == 'no' ) {

    134. 

  134. 				// More tag content is not visible by default - works for both web and rss content - unfortunately

    135. 

  135. 				add_filter('the_content_more_link', array(&$this, 'show_moretag_protection'), 99, 2);

    136. 

  136. 				add_filter('the_content', array(&$this, 'replace_moretag_content'), 1);

    137. 

  137. 				add_filter('the_content_feed', array(&$this, 'replace_moretag_content'), 1);

    138. 

  138. 			}

    139. 

  139. 

    140. 

  140. 			// Shortcodes setup

    141. 

  141. 			if(!empty($M_options['membershipshortcodes'])) {

    142. 

  142. 				foreach($M_options['membershipshortcodes'] as $key => $value) {

    143. 

  143. 					if(!empty($value)) {

    144. 

  144. 						add_shortcode(stripslashes(trim($value)), array(&$this, 'do_membership_shortcode') );

    145. 

  145. 					}

    146. 

  146. 				}

    147. 

  147. 

    148. 

  148. 				// Shortcodes now default to protected for those entered by the user (which will be none for new users / installs)

    149. 

  149. 				$this->override_shortcodes();

    150. 

  150. 			}

    151. 

  151. 

    152. 

  152. 			// Downloads protection

    153. 

  153. 			if(!empty($M_options['membershipdownloadgroups'])) {

    154. 

  154. 				add_filter('the_content', array(&$this, 'protect_download_content') );

    155. 

  155. 			}

    156. 

  156. 

    157. 

  157. 			// Makes sure that despite other rules, the pages set in the options panel are available to the user

    158. 

  158. 			add_action('pre_get_posts', array(&$this, 'ensure_option_pages_visible'), 999 );

    159. 

  159. 			// check for a no-access page and always filter it if needed

    160. 

  160. 			if(!empty($M_options['nocontent_page']) && $M_options['nocontent_page'] != $M_options['registration_page']) {

    161. 

  161. 				add_filter('get_pages', array(&$this, 'hide_nocontent_page_from_menu'), 99);

    162. 

  162. 			}

    163. 

  163. 

    164. 

  164. 			// New registration form settings

    165. 

  165. 			if( (isset($M_options['formtype']) && $M_options['formtype'] == 'new') ) {

    166. 

  166. 				add_action( 'wp_ajax_nopriv_buynow', array(&$this, 'popover_signup_form') );

    167. 

  167. 

    168. 

  168. 				//login and register are no-priv only because, well they aren't logged in or registered

    169. 

  169. 				add_action( 'wp_ajax_nopriv_register_user', array(&$this, 'popover_register_process') );

    170. 

  170. 				add_action( 'wp_ajax_nopriv_login_user', array(&$this, 'popover_login_process') );

    171. 

  171. 

    172. 

  172. 				// if logged in:

    173. 

  173. 				add_action( 'wp_ajax_buynow', array(&$this, 'popover_sendpayment_form') );

    174. 

  174. 				add_action( 'wp_ajax_register_user', array(&$this, 'popover_register_process') );

    175. 

  175. 				add_action( 'wp_ajax_login_user', array(&$this, 'popover_login_process') );

    176. 

  176. 			}

    177. 

  177. 

    178. 

  178. 		}

    179. 

  179. 

    180. 

  180. 		function add_queryvars($vars) {

    181. 

  181. 

    182. 

  182. 			if(!in_array('feedkey',$vars)) $vars[] = 'feedkey';

    183. 

  183. 			if(!in_array('protectedfile',$vars)) $vars[] = 'protectedfile';

    184. 

  184. 			if(!in_array('paymentgateway',$vars)) $vars[] = 'paymentgateway';

    185. 

  185. 

    186. 

  186. 			return $vars;

    187. 

  187. 		}

    188. 

  188. 

    189. 

  189. 		function add_rewrites($wp_rewrite) {

    190. 

  190. 

    191. 

  191. 			global $M_options;

    192. 

  192. 

    193. 

  193. 			// This function adds in the api rewrite rules

    194. 

  194. 			// Note the addition of the namespace variable so that we know these are vent based

    195. 

  195. 			// calls

    196. 

  196. 

    197. 

  197. 			$new_rules = array();

    198. 

  198. 

    199. 

  199. 			if(!empty($M_options['masked_url'])) {

    200. 

  200. 				$new_rules[trailingslashit($M_options['masked_url']) . '(.*)'] = 'index.php?protectedfile=' . $wp_rewrite->preg_index(1);

    201. 

  201. 			}

    202. 

  202. 

    203. 

  203. 			$new_rules['paymentreturn/(.+)'] = 'index.php?paymentgateway=' . $wp_rewrite->preg_index(1);

    204. 

  204. 

    205. 

  205. 			$new_rules = apply_filters('M_rewrite_rules', $new_rules);

    206. 

  206. 

    207. 

  207. 		  	$wp_rewrite->rules = array_merge($new_rules, $wp_rewrite->rules);

    208. 

  208. 

    209. 

  209. 			return $wp_rewrite;

    210. 

  210. 		}

    211. 

  211. 

    212. 

  212. 		function override_register( $link ) {

    213. 

  213. 

    214. 

  214. 			global $M_options;

    215. 

  215. 

    216. 

  216. 			if ( ! is_user_logged_in() ) {

    217. 

  217. 				if ( get_option('users_can_register') ) {

    218. 

  218. 					// get the new registration stuff.

    219. 

  219. 					if(!empty($M_options['registration_page'])) {

    220. 

  220. 						$url = get_permalink( $M_options['registration_page'] );

    221. 

  221. 						$link = preg_replace('/<a href(.+)a>/', '<a href="' . $url . '">' . __('Register', 'membership') . '</a>', $link);

    222. 

  222. 					}

    223. 

  223. 

    224. 

  224. 				}

    225. 

  225. 			} else {

    226. 

  226. 				// change to account page?

    227. 

  227. 				if(!empty($M_options['account_page'])) {

    228. 

  228. 					$url = get_permalink( $M_options['account_page'] );

    229. 

  229. 					$link = preg_replace('/<a href(.+)a>/', '<a href="' . $url . '">' . __('My Account', 'membership') . '</a>', $link);

    230. 

  230. 				}

    231. 

  231. 			}

    232. 

  232. 

    233. 

  233. 			return $link;

    234. 

  234. 		}

    235. 

  235. 

    236. 

  236. 		function add_feed_key( $output, $feed ) {

    237. 

  237. 			global $user;

    238. 

  238. 

    239. 

  239. 			if($user->ID > 0) {

    240. 

  240. 

    241. 

  241. 				$member = new M_Membership($user->ID);

    242. 

  242. 

    243. 

  243. 				if($member->is_member()) {

    244. 

  244. 					$key = get_user_meta($user->ID, '_membership_key');

    245. 

  245. 

    246. 

  246. 					if(empty($key)) {

    247. 

  247. 						$key = md5($user->ID . $user->user_pass . time());

    248. 

  248. 						update_user_meta($user->ID, '_membership_key', $key);

    249. 

  249. 					}

    250. 

  250. 

    251. 

  251. 					if(!empty($key)) {

    252. 

  252. 						$output = add_query_arg('k', $key, untrailingslashit($output));

    253. 

  253. 					}

    254. 

  254. 				}

    255. 

  255. 

    256. 

  256. 			}

    257. 

  257. 

    258. 

  258. 			return $output;

    259. 

  259. 

    260. 

  260. 		}

    261. 

  261. 

    262. 

  262. 		function initialise_membership_protection($wp) {

    263. 

  263. 

    264. 

  264. 			global $user, $member, $M_options, $M_Rules, $wp_query, $wp_rewrite, $M_active;

    265. 

  265. 			// Set up some common defaults

    266. 

  266. 

    267. 

  267. 			static $initialised = false;

    268. 

  268. 

    269. 

  269. 			if($initialised) {

    270. 

  270. 				// ensure that this is only called once, so return if we've been here already.

    271. 

  271. 				return;

    272. 

  272. 			}

    273. 

  273. 

    274. 

  274. 			if(empty($user) || !method_exists($user, 'has_cap')) {

    275. 

  275. 				$user = wp_get_current_user();

    276. 

  276. 			}

    277. 

  277. 

    278. 

  278. 			if( $M_active == 'no' ) {

    279. 

  279. 				// The plugin isn't active so just return

    280. 

  280. 				return;

    281. 

  281. 			}

    282. 

  282. 

    283. 

  283. 			if(!method_exists($user, 'has_cap') || $user->has_cap('membershipadmin')) {

    284. 

  284. 				// Admins can see everything - unless we have a cookie set to limit viewing

    285. 

  285. 				if(!empty($_COOKIE['membershipuselevel']) && $_COOKIE['membershipuselevel'] != '0') {

    286. 

  286. 

    287. 

  287. 					$level_id = (int) $_COOKIE['membershipuselevel'];

    288. 

  288. 

    289. 

  289. 					$member = new M_Membership($user->ID);

    290. 

  290. 					$member->assign_level( $level_id, true );

    291. 

  291. 				} else {

    292. 

  292. 					return;

    293. 

  293. 				}

    294. 

  294. 			} else {

    295. 

  295. 				// We are not a membershipadmin user

    296. 

  296. 				if(!empty($wp->query_vars['feed'])) {

    297. 

  297. 					// This is a feed access

    298. 

  298. 					// Set the feed rules

    299. 

  299. 					if(isset($_GET['k'])) {

    300. 

  300. 						$key = $_GET['k'];

    301. 

  301. 

    302. 

  302. 						$user_id = $this->find_user_from_key($key);

    303. 

  303. 						$user_id = (int) $user_id;

    304. 

  304. 						if($user_id > 0) {

    305. 

  305. 							// Logged in - check there settings, if they have any.

    306. 

  306. 							$member = new M_Membership($user_id);

    307. 

  307. 							// Load the levels for this member - and associated rules

    308. 

  308. 							$member->load_levels( true );

    309. 

  309. 						} else {

    310. 

  310. 							$member = new M_Membership(false);

    311. 

  311. 							if(isset($M_options['strangerlevel']) && $M_options['strangerlevel'] != 0) {

    312. 

  312. 								$member->assign_level($M_options['strangerlevel'], true );

    313. 

  313. 							} else {

    314. 

  314. 								// This user can't access anything on the site - show a blank feed.

    315. 

  315. 								add_filter('the_posts', array(&$this, 'show_noaccess_feed'), 1 );

    316. 

  316. 							}

    317. 

  317. 						}

    318. 

  318. 

    319. 

  319. 					} else {

    320. 

  320. 						// not passing a key so limit based on stranger settings

    321. 

  321. 						// need to grab the stranger settings

    322. 

  322. 						$member = new M_Membership($user->ID);

    323. 

  323. 						if(isset($M_options['strangerlevel']) && $M_options['strangerlevel'] != 0) {

    324. 

  324. 							$member->assign_level($M_options['strangerlevel'], true );

    325. 

  325. 						} else {

    326. 

  326. 							// This user can't access anything on the site - show a blank feed.

    327. 

  327. 							add_filter('the_posts', array(&$this, 'show_noaccess_feed'), 1 );

    328. 

  328. 						}

    329. 

  329. 					}

    330. 

  330. 				} else {

    331. 

  331. 					// Users

    332. 

  332. 					$member = new M_Membership($user->ID);

    333. 

  333. 

    334. 

  334. 					if($user->ID > 0 && $member->has_levels()) {

    335. 

  335. 						// Load the levels for this member - and associated rules

    336. 

  336. 						$member->load_levels( true );

    337. 

  337. 					} else {

    338. 

  338. 						// not logged in so limit based on stranger settings

    339. 

  339. 						// need to grab the stranger settings

    340. 

  340. 						if(isset($M_options['strangerlevel']) && $M_options['strangerlevel'] != 0) {

    341. 

  341. 							$member->assign_level( $M_options['strangerlevel'], true );

    342. 

  342. 						} else {

    343. 

  343. 							// This user can't access anything on the site - .

    344. 

  344. 							add_filter('comments_open', array(&$this, 'close_comments'), 99, 2);

    345. 

  345. 							// Changed for this version to see if it helps to get around changed in WP 3.5

    346. 

  346. 							//add_action('pre_get_posts', array(&$this, 'show_noaccess_page'), 1 );

    347. 

  347. 							add_action('the_posts', array(&$this, 'show_noaccess_page'), 1 );

    348. 

  348. 							//the_posts

    349. 

  349. 							// Hide all pages from menus - except the signup one

    350. 

  350. 							add_filter('get_pages', array(&$this, 'remove_pages_menu'));

    351. 

  351. 							// Hide all categories from lists

    352. 

  352. 							add_filter( 'get_terms', array(&$this, 'remove_categories'), 1, 3 );

    353. 

  353. 						}

    354. 

  354. 					}

    355. 

  355. 				}

    356. 

  356. 			}

    357. 

  357. 

    358. 

  358. 			// Set up the level shortcodes here

    359. 

  359. 			$shortcodes = apply_filters('membership_level_shortcodes', array() );

    360. 

  360. 			if(!empty($shortcodes)) {

    361. 

  361. 				foreach($shortcodes as $key => $value) {

    362. 

  362. 					if(!empty($value)) {

    363. 

  363. 						if($member->has_level($key)) {

    364. 

  364. 							// member is on this level so can see the content

    365. 

  365. 							add_shortcode(stripslashes(trim($value)), array(&$this, 'do_level_shortcode') );

    366. 

  366. 						} else {

    367. 

  367. 							// member isn't on this level and so can't see the content

    368. 

  368. 							add_shortcode(stripslashes(trim($value)), array(&$this, 'do_levelprotected_shortcode') );

    369. 

  369. 						}

    370. 

  370. 					}

    371. 

  371. 				}

    372. 

  372. 			}

    373. 

  373. 

    374. 

  374. 			$shortcodes = apply_filters('membership_not_level_shortcodes', array() );

    375. 

  375. 			if(!empty($shortcodes)) {

    376. 

  376. 				foreach($shortcodes as $key => $value) {

    377. 

  377. 					if(!empty($value)) {

    378. 

  378. 						if(!$member->has_level($key)) {

    379. 

  379. 							// member is on this level so can see the content

    380. 

  380. 							add_shortcode(stripslashes(trim($value)), array(&$this, 'do_level_shortcode') );

    381. 

  381. 						} else {

    382. 

  382. 							// member isn't on this level and so can't see the content

    383. 

  383. 							add_shortcode(stripslashes(trim($value)), array(&$this, 'do_levelprotected_shortcode') );

    384. 

  384. 						}

    385. 

  385. 					}

    386. 

  386. 				}

    387. 

  387. 			}

    388. 

  388. 

    389. 

  389. 			do_action('membership-add-shortcodes');

    390. 

  390. 

    391. 

  391. 			// Set the initialisation status

    392. 

  392. 			$initialised = true;

    393. 

  393. 

    394. 

  394. 		}

    395. 

  395. 

    396. 

  396. 		function remove_categories($terms, $taxonomies, $args) {

    397. 

  397. 

    398. 

  398. 			foreach( (array) $terms as $key => $value ) {

    399. 

  399. 				if($value->taxonomy == 'category') {

    400. 

  400. 					unset($terms[$key]);

    401. 

  401. 				}

    402. 

  402. 			}

    403. 

  403. 

    404. 

  404. 			return $terms;

    405. 

  405. 		}

    406. 

  406. 

    407. 

  407. 		function remove_pages_menu($pages) {

    408. 

  408. 

    409. 

  409. 			global $M_options;

    410. 

  410. 

    411. 

  411. 			foreach( (array) $pages as $key => $page ) {

    412. 

  412. 				if(!empty($M_options['registration_page']) && $page->ID == $M_options['registration_page']) {

    413. 

  413. 					// We want to keep this page available

    414. 

  414. 				} else {

    415. 

  415. 					unset($pages[$key]);

    416. 

  416. 				}

    417. 

  417. 			}

    418. 

  418. 

    419. 

  419. 			return $pages;

    420. 

  420. 		}

    421. 

  421. 

    422. 

  422. 		function handle_paymentgateways($wp_query) {

    423. 

  423. 			if(!empty($wp_query->query_vars['paymentgateway'])) {

    424. 

  424. 				do_action( 'membership_process_payment_return', $wp_query->query_vars['paymentgateway'] );

    425. 

  425. 				// exit();

    426. 

  426. 			}

    427. 

  427. 		}

    428. 

  428. 

    429. 

  429. 		function handle_download_protection($wp_query) {

    430. 

  430. 

    431. 

  431. 			global $user, $member, $wpdb, $M_options;

    432. 

  432. 

    433. 

  433. 			if(!empty($wp_query->query_vars['protectedfile'])) {

    434. 

  434. 				$protected = explode("/", $wp_query->query_vars['protectedfile']);

    435. 

  435. 				$protected = array_pop( $protected );

    436. 

  436. 			}

    437. 

  437. 

    438. 

  438. 			if(empty($protected) && !empty($_GET['file'])) {

    439. 

  439. 				$protected = $_GET['file'];

    440. 

  440. 			}

    441. 

  441. 

    442. 

  442. 			if(!empty($protected)) {

    443. 

  443. 				// See if the filename has a size extension and if so, strip it out

    444. 

  444. 				$filename_exp = '/(.+)\-(\d+[x]\d+)\.(.+)$/';

    445. 

  445. 				$filematch = array();

    446. 

  446. 				if(preg_match($filename_exp, $protected, $filematch)) {

    447. 

  447. 					// We have an image with an image size attached

    448. 

  448. 					$newfile = $filematch[1] . "." . $filematch[3];

    449. 

  449. 					$size_extension = "-" . $filematch[2];

    450. 

  450. 				} else {

    451. 

  451. 					$newfile = $protected;

    452. 

  452. 					$size_extension = '';

    453. 

  453. 				}

    454. 

  454. 				// Process based on the protection type

    455. 

  455. 				switch($M_options['protection_type']) {

    456. 

  456. 					case 'complete' :	// Work out the post_id again

    457. 

  457. 										$post_id = preg_replace('/^' . MEMBERSHIP_FILE_NAME_PREFIX . '/', '', $newfile);

    458. 

  458. 										$post_id -= (INT) MEMBERSHIP_FILE_NAME_INCREMENT;

    459. 

  459. 

    460. 

  460. 										if(is_numeric($post_id) && $post_id > 0) {

    461. 

  461. 											$image = get_post_meta($post_id, '_wp_attached_file', true);

    462. 

  462. 											if(!empty($size_extension)) {

    463. 

  463. 												// Add back in a size extension if we need to

    464. 

  464. 												$image = str_replace( '.' . pathinfo($image, PATHINFO_EXTENSION), $size_extension . '.' . pathinfo($image, PATHINFO_EXTENSION), $image );

    465. 

  465. 												// hack to remove any double extensions :/ need to change when work out a neater way

    466. 

  466. 												$image = str_replace( $size_extension . $size_extension, $size_extension, $image );

    467. 

  467. 											}

    468. 

  468. 										}

    469. 

  469. 										break;

    470. 

  470. 

    471. 

  471. 					case 'hybrid' :		// Work out the post_id again

    472. 

  472. 

    473. 

  473. 										$post_id = preg_replace('/^' . MEMBERSHIP_FILE_NAME_PREFIX . '/', '', $newfile);

    474. 

  474. 										$post_id -= (INT) MEMBERSHIP_FILE_NAME_INCREMENT;

    475. 

  475. 

    476. 

  476. 										if(is_numeric($post_id) && $post_id > 0) {

    477. 

  477. 											$image = get_post_meta($post_id, '_wp_attached_file', true);

    478. 

  478. 											if(!empty($size_extension)) {

    479. 

  479. 												// Add back in a size extension if we need to

    480. 

  480. 												$image = str_replace( '.' . pathinfo($image, PATHINFO_EXTENSION), $size_extension . '.' . pathinfo($image, PATHINFO_EXTENSION), $image );

    481. 

  481. 												// hack to remove any double extensions :/ need to change when work out a neater way

    482. 

  482. 												$image = str_replace( $size_extension . $size_extension, $size_extension, $image );

    483. 

  483. 											}

    484. 

  484. 										}

    485. 

  485. 										break;

    486. 

  486. 

    487. 

  487. 					case 'basic' :

    488. 

  488. 					default:			// The basic protection - need to change this

    489. 

  489. 										$sql = $this->db->prepare( "SELECT post_id FROM {$this->db->postmeta} WHERE meta_key = '_wp_attached_file' AND meta_value LIKE %s", '%' . $newfile . '%' );

    490. 

  490. 										$post_id = $wpdb->get_var( $sql );

    491. 

  491. 

    492. 

  492. 										if(empty($post_id)) {

    493. 

  493. 											// Can't find the file in the first pass, try the second pass.

    494. 

  494. 											$sql = $this->db->prepare( "SELECT post_id FROM {$this->db->postmeta} WHERE meta_key = '_wp_attachment_metadata' AND meta_value LIKE %s", '%' . $protected . '%');

    495. 

  495. 											$post_id = $this->db->get_var( $sql );

    496. 

  496. 										}

    497. 

  497. 

    498. 

  498. 										if(is_numeric($post_id) && $post_id > 0) {

    499. 

  499. 											$image = get_post_meta($post_id, '_wp_attached_file', true);

    500. 

  500. 											if(!empty($size_extension)) {

    501. 

  501. 												// Add back in a size extension if we need to

    502. 

  502. 												$image = str_replace( '.' . pathinfo($image, PATHINFO_EXTENSION), $size_extension . '.' . pathinfo($image, PATHINFO_EXTENSION), $image );

    503. 

  503. 												// hack to remove any double extensions :/ need to change when work out a neater way

    504. 

  504. 												$image = str_replace( $size_extension . $size_extension, $size_extension, $image );

    505. 

  505. 											}

    506. 

  506. 										}

    507. 

  507. 										break;

    508. 

  508. 				}

    509. 

  509. 

    510. 

  510. 

    511. 

  511. 				if(!empty($image) && !empty($post_id) && is_numeric($post_id)) {

    512. 

  512. 					// check for protection

    513. 

  513. 					$group = get_post_meta($post_id, '_membership_protected_content_group', true);

    514. 

  514. 

    515. 

  515. 					if(empty($group) || $group == 'no') {

    516. 

  516. 						// it's not protected so grab and display it

    517. 

  517. 						//$file = $wp_query->query_vars['protectedfile'];

    518. 

  518. 						$this->output_file($image);

    519. 

  519. 					} else {

    520. 

  520. 						// check we can see it

    521. 

  521. 						if(empty($member) || !method_exists($member, 'has_level_rule')) {

    522. 

  522. 							$user = wp_get_current_user();

    523. 

  523. 							$member = new M_Membership( $user->ID );

    524. 

  524. 						}

    525. 

  525. 

    526. 

  526. 						if( method_exists($member, 'has_level_rule') && $member->has_level_rule('downloads') && $member->pass_thru( 'downloads', array( 'can_view_download' => $group ) ) ) {

    527. 

  527. 							//$file = $wp_query->query_vars['protectedfile'];

    528. 

  528. 							$this->output_file($image);

    529. 

  529. 						} else {

    530. 

  530. 							$this->show_noaccess_image($wp_query);

    531. 

  531. 						}

    532. 

  532. 					}

    533. 

  533. 				} else {

    534. 

  534. 					// We haven't found anything so default to the no access image

    535. 

  535. 					$this->show_noaccess_image($wp_query);

    536. 

  536. 				}

    537. 

  537. 

    538. 

  538. 				exit();

    539. 

  539. 			}

    540. 

  540. 

    541. 

  541. 		}

    542. 

  542. 

    543. 

  543. 		function output_file($pathtofile) {

    544. 

  544. 

    545. 

  545. 			global $wpdb, $M_options;

    546. 

  546. 

    547. 

  547. 			// The directory and direct path dir

    548. 

  548. 			$uploadpath = membership_wp_upload_dir();

    549. 

  549. 			$file = trailingslashit($uploadpath) . $pathtofile;

    550. 

  550. 			// The url and direct url

    551. 

  551. 			$origpath = membership_upload_url();

    552. 

  552. 			$trueurl = trailingslashit($origpath) . $pathtofile;

    553. 

  553. 

    554. 

  554. 			if ( !is_file( $file ) ) {

    555. 

  555. 				status_header( 404 );

    556. 

  556. 				die( '404 &#8212; File not found.' );

    557. 

  557. 			}

    558. 

  558. 

    559. 

  559. 			$mime = wp_check_filetype( $file );

    560. 

  560. 			if( false === $mime[ 'type' ] && function_exists( 'mime_content_type' ) )

    561. 

  561. 				$mime[ 'type' ] = mime_content_type( $file );

    562. 

  562. 

    563. 

  563. 			if( $mime[ 'type' ] )

    564. 

  564. 				$mimetype = $mime[ 'type' ];

    565. 

  565. 			else

    566. 

  566. 				$mimetype = 'image/' . substr( $trueurl, strrpos( $trueurl, '.' ) + 1 );

    567. 

  567. 

    568. 

  568. 			header( 'Content-type: ' . $mimetype ); // always send this

    569. 

  569. 			if ( false === strpos( $_SERVER['SERVER_SOFTWARE'], 'Microsoft-IIS' ) )

    570. 

  570. 				header( 'Content-Length: ' . filesize( $file ) );

    571. 

  571. 

    572. 

  572. 			$last_modified = gmdate( 'D, d M Y H:i:s', filemtime( $file ) );

    573. 

  573. 			$etag = '"' . md5( $last_modified ) . '"';

    574. 

  574. 			header( "Last-Modified: $last_modified GMT" );

    575. 

  575. 			header( 'ETag: ' . $etag );

    576. 

  576. 			header( 'Expires: ' . gmdate( 'D, d M Y H:i:s', time() + 100000000 ) . ' GMT' );

    577. 

  577. 

    578. 

  578. 			// Support for Conditional GET

    579. 

  579. 			$client_etag = isset( $_SERVER['HTTP_IF_NONE_MATCH'] ) ? stripslashes( $_SERVER['HTTP_IF_NONE_MATCH'] ) : false;

    580. 

  580. 

    581. 

  581. 			if( ! isset( $_SERVER['HTTP_IF_MODIFIED_SINCE'] ) )

    582. 

  582. 				$_SERVER['HTTP_IF_MODIFIED_SINCE'] = false;

    583. 

  583. 

    584. 

  584. 			$client_last_modified = trim( $_SERVER['HTTP_IF_MODIFIED_SINCE'] );

    585. 

  585. 			// If string is empty, return 0. If not, attempt to parse into a timestamp

    586. 

  586. 			$client_modified_timestamp = $client_last_modified ? strtotime( $client_last_modified ) : 0;

    587. 

  587. 

    588. 

  588. 			// Make a timestamp for our most recent modification...

    589. 

  589. 			$modified_timestamp = strtotime($last_modified);

    590. 

  590. 

    591. 

  591. 			if ( ( $client_last_modified && $client_etag )

    592. 

  592. 				? ( ( $client_modified_timestamp >= $modified_timestamp) && ( $client_etag == $etag ) )

    593. 

  593. 				: ( ( $client_modified_timestamp >= $modified_timestamp) || ( $client_etag == $etag ) )

    594. 

  594. 				) {

    595. 

  595. 				status_header( 304 );

    596. 

  596. 				exit;

    597. 

  597. 			}

    598. 

  598. 

    599. 

  599. 			// If we made it this far, just serve the file

    600. 

  600. 			readfile( $file );

    601. 

  601. 		}

    602. 

  602. 

    603. 

  603. 		function show_noaccess_image($wp_query) {

    604. 

  604. 

    605. 

  605. 			$locale = apply_filters( 'membership_locale', get_locale() );

    606. 

  606. 			if(file_exists(membership_dir( "membershipincludes/images/noaccess/noaccess-$locale.png" ))) {

    607. 

  607. 				$file = membership_dir( "membershipincludes/images/noaccess/noaccess-$locale.png" );

    608. 

  608. 				$trueurl = membership_url( "membershipincludes/images/noaccess/noaccess-$locale.png" );

    609. 

  609. 			} elseif( file_exists(membership_dir( "membershipincludes/images/noaccess/noaccess.png" )) ) {

    610. 

  610. 				$file = membership_dir( "membershipincludes/images/noaccess/noaccess.png" );

    611. 

  611. 				$trueurl = membership_url( "membershipincludes/images/noaccess/noaccess.png" );

    612. 

  612. 			}

    613. 

  613. 

    614. 

  614. 

    615. 

  615. 			if(!empty($file)) {

    616. 

  616. 				if ( !is_file( $file ) ) {

    617. 

  617. 					status_header( 404 );

    618. 

  618. 					die( '404 &#8212; File not found.' );

    619. 

  619. 				}

    620. 

  620. 

    621. 

  621. 				$mime = wp_check_filetype( $file );

    622. 

  622. 				if( false === $mime[ 'type' ] && function_exists( 'mime_content_type' ) )

    623. 

  623. 					$mime[ 'type' ] = mime_content_type( $file );

    624. 

  624. 

    625. 

  625. 				if( $mime[ 'type' ] )

    626. 

  626. 					$mimetype = $mime[ 'type' ];

    627. 

  627. 				else

    628. 

  628. 					$mimetype = 'image/' . substr( $trueurl, strrpos( $trueurl, '.' ) + 1 );

    629. 

  629. 

    630. 

  630. 				header( 'Content-type: ' . $mimetype ); // always send this

    631. 

  631. 				if ( false === strpos( $_SERVER['SERVER_SOFTWARE'], 'Microsoft-IIS' ) )

    632. 

  632. 					header( 'Content-Length: ' . filesize( $file ) );

    633. 

  633. 

    634. 

  634. 				$last_modified = gmdate( 'D, d M Y H:i:s', filemtime( $file ) );

    635. 

  635. 				$etag = '"' . md5( $last_modified ) . '"';

    636. 

  636. 				header( "Last-Modified: $last_modified GMT" );

    637. 

  637. 				header( 'ETag: ' . $etag );

    638. 

  638. 				header( 'Expires: ' . gmdate( 'D, d M Y H:i:s', time() + 100000000 ) . ' GMT' );

    639. 

  639. 

    640. 

  640. 				// Support for Conditional GET

    641. 

  641. 				$client_etag = isset( $_SERVER['HTTP_IF_NONE_MATCH'] ) ? stripslashes( $_SERVER['HTTP_IF_NONE_MATCH'] ) : false;

    642. 

  642. 

    643. 

  643. 				if( ! isset( $_SERVER['HTTP_IF_MODIFIED_SINCE'] ) )

    644. 

  644. 					$_SERVER['HTTP_IF_MODIFIED_SINCE'] = false;

    645. 

  645. 

    646. 

  646. 				$client_last_modified = trim( $_SERVER['HTTP_IF_MODIFIED_SINCE'] );

    647. 

  647. 				// If string is empty, return 0. If not, attempt to parse into a timestamp

    648. 

  648. 				$client_modified_timestamp = $client_last_modified ? strtotime( $client_last_modified ) : 0;

    649. 

  649. 

    650. 

  650. 				// Make a timestamp for our most recent modification...

    651. 

  651. 				$modified_timestamp = strtotime($last_modified);

    652. 

  652. 

    653. 

  653. 				if ( ( $client_last_modified && $client_etag )

    654. 

  654. 					? ( ( $client_modified_timestamp >= $modified_timestamp) && ( $client_etag == $etag ) )

    655. 

  655. 					: ( ( $client_modified_timestamp >= $modified_timestamp) || ( $client_etag == $etag ) )

    656. 

  656. 					) {

    657. 

  657. 					status_header( 304 );

    658. 

  658. 					exit;

    659. 

  659. 				}

    660. 

  660. 

    661. 

  661. 				// If we made it this far, just serve the file

    662. 

  662. 				readfile( $file );

    663. 

  663. 			}

    664. 

  664. 

    665. 

  665. 		}

    666. 

  666. 

    667. 

  667. 		function find_user_from_key($key = false) {

    668. 

  668. 

    669. 

  669. 			global $wpdb;

    670. 

  670. 

    671. 

  671. 			//$key = get_usermeta($user->ID, '_membership_key');

    672. 

  672. 			$sql = $wpdb->prepare( "SELECT user_id FROM {$wpdb->usermeta} WHERE meta_key = %s AND meta_value = %s LIMIT 0,1", '_membership_key', $key );

    673. 

  673. 

    674. 

  674. 			$user_id = $wpdb->get_var($sql);

    675. 

  675. 

    676. 

  676. 			return $user_id;

    677. 

  677. 

    678. 

  678. 		}

    679. 

  679. 

    680. 

  680. 		// loop and page overrides

    681. 

  681. 

    682. 

  682. 		function show_moretag_protection($more_tag_link, $more_tag) {

    683. 

  683. 

    684. 

  684. 			global $M_options;

    685. 

  685. 

    686. 

  686. 			return stripslashes($M_options['moretagmessage']);

    687. 

  687. 

    688. 

  688. 		}

    689. 

  689. 

    690. 

  690. 		function replace_moretag_content($the_content) {

    691. 

  691. 

    692. 

  692. 			global $M_options;

    693. 

  693. 

    694. 

  694. 			$morestartsat = strpos($the_content, '<span id="more-');

    695. 

  695. 

    696. 

  696. 			if($morestartsat !== false) {

    697. 

  697. 				$the_content = substr($the_content, 0, $morestartsat);

    698. 

  698. 				$the_content .= stripslashes($M_options['moretagmessage']);

    699. 

  699. 			}

    700. 

  700. 

    701. 

  701. 			return $the_content;

    702. 

  702. 

    703. 

  703. 		}

    704. 

  704. 

    705. 

  705. 		// Output the level based shortcode content

    706. 

  706. 		function do_level_shortcode($atts, $content = null, $code = "") {

    707. 

  707. 

    708. 

  708. 			return do_shortcode($content);

    709. 

  709. 

    710. 

  710. 		}

    711. 

  711. 

    712. 

  712. 		// Output the protected shortcode content

    713. 

  713. 		function do_membership_shortcode($atts, $content = null, $code = "") {

    714. 

  714. 

    715. 

  715. 			return do_shortcode($content);

    716. 

  716. 

    717. 

  717. 		}

    718. 

  718. 

    719. 

  719. 		// Show the protected shortcode message

    720. 

  720. 		function do_protected_shortcode($atts, $content = null, $code = "") {

    721. 

  721. 

    722. 

  722. 			global $M_options;

    723. 

  723. 

    724. 

  724. 			return stripslashes($M_options['shortcodemessage']);

    725. 

  725. 

    726. 

  726. 		}

    727. 

  727. 

    728. 

  728. 		// Show the level based protected shortcode message

    729. 

  729. 		function do_levelprotected_shortcode($atts, $content = null, $code = "") {

    730. 

  730. 

    731. 

  731. 			global $M_options;

    732. 

  732. 

    733. 

  733. 			// Set up the level shortcodes here

    734. 

  734. 			$shortcodes = apply_filters('membership_level_shortcodes', array() );

    735. 

  735. 			$notshortcodes = apply_filters('membership_not_level_shortcodes', array() );

    736. 

  736. 

    737. 

  737. 			$code = strtolower( $code );

    738. 

  738. 

    739. 

  739. 			if( substr( $code, 0, 4 ) !== "not-" ) {

    740. 

  740. 				if(!empty($shortcodes)) {

    741. 

  741. 					// search positive shortcodes first

    742. 

  742. 					$id = array_search( $code, $shortcodes );

    743. 

  743. 					if($id !== false) {

    744. 

  744. 						// we have found a level so we need to check if it has a custom protected message, otherwise we'll just output the default main on

    745. 

  745. 						$level = new M_Level( $id );

    746. 

  746. 						$message = $level->get_meta( 'level_protectedcontent' );

    747. 

  747. 						if(!empty($message)) {

    748. 

  748. 							return stripslashes($message);

    749. 

  749. 						}

    750. 

  750. 					}

    751. 

  751. 				}

    752. 

  752. 			} else {

    753. 

  753. 				if(!empty($notshortcodes)) {

    754. 

  754. 					// search positive shortcodes first

    755. 

  755. 					$id = array_search( $code, $notshortcodes );

    756. 

  756. 					if($id !== false) {

    757. 

  757. 						// we have found a level so we need to check if it has a custom protected message, otherwise we'll just output the default main on

    758. 

  758. 						$level = new M_Level( $id );

    759. 

  759. 						$message = $level->get_meta( 'level_protectedcontent' );

    760. 

  760. 						if(!empty($message)) {

    761. 

  761. 							return stripslashes($message);

    762. 

  762. 						}

    763. 

  763. 					}

    764. 

  764. 				}

    765. 

  765. 			}

    766. 

  766. 

    767. 

  767. 			// If we are here then we have no custom message, or the shortcode wasn't found so just output the standard message

    768. 

  768. 			if(isset($M_options['shortcodemessage'])) {

    769. 

  769. 				return stripslashes($M_options['shortcodemessage']);

    770. 

  770. 			} else {

    771. 

  771. 				return '';

    772. 

  772. 			}

    773. 

  773. 

    774. 

  774. 

    775. 

  775. 		}

    776. 

  776. 

    777. 

  777. 

    778. 

  778. 		function override_shortcodes() {

    779. 

  779. 			// By default all the shortcodes are protected to override them here

    780. 

  780. 			global $M_shortcode_tags, $shortcode_tags;

    781. 

  781. 

    782. 

  782. 			$M_shortcode_tags = $shortcode_tags;

    783. 

  783. 

    784. 

  784. 			if(!empty($M_options['membershipshortcodes'])) {

    785. 

  785. 				foreach($M_options['membershipshortcodes'] as $key => $value) {

    786. 

  786. 					if(!empty($value)) {

    787. 

  787. 						$shortcode_tags[$value] = array(&$this, 'do_protected_shortcode');

    788. 

  788. 					}

    789. 

  789. 				}

    790. 

  790. 			}

    791. 

  791. 

    792. 

  792. 		}

    793. 

  793. 

    794. 

  794. 		function may_be_singular($wp_query) {

    795. 

  795. 

    796. 

  796. 			if( is_archive() || is_author() || is_category() || is_tag() || is_tax() || is_search() ) {

    797. 

  797. 				return false;

    798. 

  798. 			} else {

    799. 

  799. 				return true;

    800. 

  800. 			}

    801. 

  801. 

    802. 

  802. 		}

    803. 

  803. 

    804. 

  804. 		function check_for_posts_existance($posts, $wp_query) {

    805. 

  805. 

    806. 

  806. 			global $bp, $wp_query;

    807. 

  807. 

    808. 

  808. 			if(!empty($bp)) {

    809. 

  809. 				// BuddyPress exists so we have to handle "pretend" pages.

    810. 

  810. 				$thepage = substr($wp_query->query['pagename'], 0 , strpos($wp_query->query['pagename'], '/'));

    811. 

  811. 				if(empty($thepage)) $thepage = $wp_query->query['pagename'];

    812. 

  812. 

    813. 

  813. 				$bppages = apply_filters('membership_buddypress_pages', (array) $bp->root_components );

    814. 

  814. 

    815. 

  815. 				if(in_array($thepage, $bppages)) {

    816. 

  816. 					return $posts;

    817. 

  817. 				}

    818. 

  818. 			}

    819. 

  819. 

    820. 

  820. 			$M_options = get_option('membership_options', array());

    821. 

  821. 

    822. 

  822. 			if(empty($posts)) {

    823. 

  823. 

    824. 

  824. 				if( !empty( $wp_query->query['pagename'] )) {

    825. 

  825. 					// we have a potentially fake page that a plugin is creating or using.

    826. 

  826. 					if( !in_array( $wp_query->query['pagename'], apply_filters( 'membership_notallowed_pagenames', array() ) ) ) {

    827. 

  827. 						return $posts;

    828. 

  828. 					} else {

    829. 

  829. 						$this->show_noaccess_page($wp_query);

    830. 

  830. 					}

    831. 

  831. 				} else {

    832. 

  832. 

    833. 

  833. 					if($M_options['override_404'] == 'yes') {

    834. 

  834. 

    835. 

  835. 						// empty posts

    836. 

  836. 						$this->show_noaccess_page($wp_query);

    837. 

  837. 					} else {

    838. 

  838. 						return $posts;

    839. 

  839. 					}

    840. 

  840. 				}

    841. 

  841. 

    842. 

  842. 				if($this->posts_actually_exist() && $this->may_be_singular($wp_query)) {

    843. 

  843. 					// we have nothing to see because it either doesn't exist, is a pretend or it's protected - move to no access page.

    844. 

  844. 					$this->show_noaccess_page($wp_query);

    845. 

  845. 				} else {

    846. 

  846. 					return $posts;

    847. 

  847. 				}

    848. 

  848. 

    849. 

  849. 			}

    850. 

  850. 

    851. 

  851. 			return $posts;

    852. 

  852. 

    853. 

  853. 		}

    854. 

  854. 

    855. 

  855. 		function posts_actually_exist() {

    856. 

  856. 

    857. 

  857. 			$sql = $this->db->prepare( "SELECT count(*) FROM {$this->db->posts} WHERE post_type = 'post' AND post_status = 'publish'" );

    858. 

  858. 

    859. 

  859. 			if($this->db->get_var( $sql ) > 0) {

    860. 

  860. 				return true;

    861. 

  861. 			} else {

    862. 

  862. 				return false;

    863. 

  863. 			}

    864. 

  864. 

    865. 

  865. 		}

    866. 

  866. 

    867. 

  867. 		function show_noaccess_feed($wp_query) {

    868. 

  868. 

    869. 

  869. 			global $M_options;

    870. 

  870. 

    871. 

  871. 			//$wp_query->query_vars['post__in'] = array(0);

    872. 

  872. 			/**

    873. 

  873. 			 * What we are going to do here, is create a fake post.  A post

    874. 

  874. 			 * that doesn't actually exist. We're gonna fill it up with

    875. 

  875. 			 * whatever values you want.  The content of the post will be

    876. 

  876. 			 * the output from your plugin.  The questions and answers.

    877. 

  877. 			 */

    878. 

  878. 

    879. 

  879. 			if(!empty($M_options['nocontent_page'])) {

    880. 

  880. 				// grab the content form the no content page

    881. 

  881. 				$post = get_post( $M_options['nocontent_page'] );

    882. 

  882. 			} else {

    883. 

  883. 				if(empty($M_options['protectedmessagetitle'])) {

    884. 

  884. 					$M_options['protectedmessagetitle'] = __('No access to this content','membership');

    885. 

  885. 				}

    886. 

  886. 

    887. 

  887. 				$post = new stdClass;

    888. 

  888. 				$post->post_author = 1;

    889. 

  889. 				$post->post_name = 'membershipnoaccess';

    890. 

  890. 				add_filter('the_permalink',create_function('$permalink', 'return "' . get_option('home') . '";'));

    891. 

  891. 				$post->guid = get_bloginfo('wpurl');

    892. 

  892. 				$post->post_title = esc_html(stripslashes($M_options['protectedmessagetitle']));

    893. 

  893. 				$post->post_content = stripslashes($M_options['protectedmessage']);

    894. 

  894. 				$post->ID = -1;

    895. 

  895. 				$post->post_status = 'publish';

    896. 

  896. 				$post->post_type = 'post';

    897. 

  897. 				$post->comment_status = 'closed';

    898. 

  898. 				$post->ping_status = 'open';

    899. 

  899. 				$post->comment_count = 0;

    900. 

  900. 				$post->post_date = current_time('mysql');

    901. 

  901. 				$post->post_date_gmt = current_time('mysql', 1);

    902. 

  902. 			}

    903. 

  903. 

    904. 

  904. 			return array($post);

    905. 

  905. 

    906. 

  906. 		}

    907. 

  907. 

    908. 

  908. 		function ensure_option_pages_visible($wp_query) {

    909. 

  909. 

    910. 

  910. 			global $M_options;

    911. 

  911. 

    912. 

  912. 			if(empty($wp_query->query_vars['post__in'])) {

    913. 

  913. 				return;

    914. 

  914. 			}

    915. 

  915. 

    916. 

  916. 			$forchecking = array();

    917. 

  917. 

    918. 

  918. 			if(!empty($M_options['registration_page'])) {

    919. 

  919. 				$wp_query->query_vars['post__in'][] = $M_options['registration_page'];

    920. 

  920. 				$forchecking[] = $M_options['registration_page'];

    921. 

  921. 			}

    922. 

  922. 

    923. 

  923. 			if(!empty($M_options['account_page'])) {

    924. 

  924. 				$wp_query->query_vars['post__in'][] = $M_options['account_page'];

    925. 

  925. 				$forchecking[] = $M_options['account_page'];

    926. 

  926. 			}

    927. 

  927. 

    928. 

  928. 			if(!empty($M_options['nocontent_page'])) {

    929. 

  929. 				$wp_query->query_vars['post__in'][] = $M_options['nocontent_page'];

    930. 

  930. 				$forchecking[] = $M_options['nocontent_page'];

    931. 

  931. 			}

    932. 

  932. 

    933. 

  933. 			if(!empty($M_options['registrationcompleted_page'])) {

    934. 

  934. 				$wp_query->query_vars['post__in'][] = $M_options['registrationcompleted_page'];

    935. 

  935. 				$forchecking[] = $M_options['registrationcompleted_page'];

    936. 

  936. 			}

    937. 

  937. 

    938. 

  938. 			if(!empty($M_options['subscriptions_page'])) {

    939. 

  939. 				$wp_query->query_vars['post__in'][] = $M_options['subscriptions_page'];

    940. 

  940. 				$forchecking[] = $M_options['subscriptions_page'];

    941. 

  941. 			}

    942. 

  942. 

    943. 

  943. 			if(is_array($wp_query->query_vars['post__not_in'])) {

    944. 

  944. 				foreach($wp_query->query_vars['post__not_in'] as $key => $value) {

    945. 

  945. 					if(in_array( $value, (array) $forchecking ) ) {

    946. 

  946. 						unset($wp_query->query_vars['post__not_in'][$key]);

    947. 

  947. 					}

    948. 

  948. 				}

    949. 

  949. 			}

    950. 

  950. 

    951. 

  951. 			$wp_query->query_vars['post__in'] = array_unique($wp_query->query_vars['post__in']);

    952. 

  952. 

    953. 

  953. 		}

    954. 

  954. 

    955. 

  955. 		function hide_nocontent_page_from_menu($pages) {

    956. 

  956. 

    957. 

  957. 			global $M_options;

    958. 

  958. 

    959. 

  959. 			foreach( (array) $pages as $key => $page ) {

    960. 

  960. 				if( ($page->ID == $M_options['nocontent_page']) || ($page->ID == $M_options['registrationcompleted_page'])) {

    961. 

  961. 					unset($pages[$key]);

    962. 

  962. 				}

    963. 

  963. 			}

    964. 

  964. 

    965. 

  965. 			return $pages;

    966. 

  966. 		}

    967. 

  967. 

    968. 

  968. 		//function show_noaccess_page($wp_query, $forceviewing = false) {

    969. 

  969. 		function show_noaccess_page($posts, $forceviewing = false) {

    970. 

  970. 

    971. 

  971. 			global $M_options;

    972. 

  972. 

    973. 

  973. 			if(!empty($posts)) {

    974. 

  974. 

    975. 

  975. 				if(count($posts) == 1 && isset($posts[0]->post_type) && $posts[0]->post_type == 'page') {

    976. 

  976. 					// We are on a page so get the first page and then check for ones we want to allow

    977. 

  977. 					$page = $posts[0];

    978. 

  978. 

    979. 

  979. 					if(!empty($page->ID) && !empty($M_options['nocontent_page']) && $page->ID == $M_options['nocontent_page']) {

    980. 

  980. 						return $posts;

    981. 

  981. 					}

    982. 

  982. 

    983. 

  983. 					if(!empty($page->ID) && !empty($M_options['registration_page']) && $page->ID == $M_options['registration_page']) {

    984. 

  984. 						// We know what we are looking at, the registration page has been set and we are trying to access it

    985. 

  985. 						return $posts;

    986. 

  986. 					}

    987. 

  987. 

    988. 

  988. 					if(!empty($page->ID) && !empty($M_options['account_page']) && $page->ID == $M_options['account_page']) {

    989. 

  989. 						// We know what we are looking at, the registration page has been set and we are trying to access it

    990. 

  990. 						return $posts;

    991. 

  991. 					}

    992. 

  992. 

    993. 

  993. 					if(!empty($page->ID) && !empty($M_options['registrationcompleted_page']) && $page->ID == $M_options['registrationcompleted_page']) {

    994. 

  994. 						// We know what we are looking at, the registration page has been set and we are trying to access it

    995. 

  995. 						return $posts;

    996. 

  996. 					}

    997. 

  997. 

    998. 

  998. 					if(!empty($page->ID) && !empty($M_options['subscriptions_page']) && $page->ID == $M_options['subscriptions_page']) {

    999. 

  999. 						// We know what we are looking at, the registration page has been set and we are trying to access it

    1000. 

  1000. 						return $posts;

    1001. 

  1001. 					}

    1002. 

  1002. 

    1003. 

  1003. 					// We are still here so we may be at a page that we shouldn't be able to see

    1004. 

  1004. 					if(!empty($M_options['nocontent_page']) && isset($page->ID) && $page->ID != $M_options['nocontent_page'] && !headers_sent()) {

    1005. 

  1005. 						// grab the content form the no content page

    1006. 

  1006. 						$url = get_permalink( (int) $M_options['nocontent_page'] );

    1007. 

  1007. 

    1008. 

  1008. 						wp_safe_redirect( $url );

    1009. 

  1009. 						exit;

    1010. 

  1010. 					} else {

    1011. 

  1011. 						return $posts;

    1012. 

  1012. 					}

    1013. 

  1013. 

    1014. 

  1014. 

    1015. 

  1015. 				} else {

    1016. 

  1016. 					// We could be on a posts page / or on a single post.

    1017. 

  1017. 					if(count($posts) == 1) {

    1018. 

  1018. 						// We could be on a single posts page, or only have the one post to view

    1019. 

  1019. 						if(isset($posts[0]->post_type) && $posts[0]->post_type != 'nav_menu_item') {

    1020. 

  1020. 							// We'll redirect if this isn't a navigation menu item

    1021. 

  1021. 							$post = $posts[0];

    1022. 

  1022. 

    1023. 

  1023. 							if(!empty($M_options['nocontent_page']) && isset($post->ID) && $post->ID != $M_options['nocontent_page'] && !headers_sent()) {

    1024. 

  1024. 								// grab the content form the no content page

    1025. 

  1025. 								$url = get_permalink( (int) $M_options['nocontent_page'] );

    1026. 

  1026. 

    1027. 

  1027. 								wp_safe_redirect( $url );

    1028. 

  1028. 								exit;

    1029. 

  1029. 							} else {

    1030. 

  1030. 								return $posts;

    1031. 

  1031. 							}

    1032. 

  1032. 						}

    1033. 

  1033. 					} else {

    1034. 

  1034. 						// Check the first post in the list

    1035. 

  1035. 						if(isset($posts[0]->post_type) && $posts[0]->post_type != 'nav_menu_item') {

    1036. 

  1036. 							// We'll redirect if this isn't a navigation menu item

    1037. 

  1037. 							$post = $posts[0];

    1038. 

  1038. 

    1039. 

  1039. 							if(!empty($M_options['nocontent_page']) && isset($post->ID) && $post->ID != $M_options['nocontent_page'] && !headers_sent()) {

    1040. 

  1040. 								// grab the content form the no content page

    1041. 

  1041. 								$url = get_permalink( (int) $M_options['nocontent_page'] );

    1042. 

  1042. 

    1043. 

  1043. 								wp_safe_redirect( $url );

    1044. 

  1044. 								exit;

    1045. 

  1045. 							} else {

    1046. 

  1046. 								return $posts;

    1047. 

  1047. 							}

    1048. 

  1048. 						}

    1049. 

  1049. 					}

    1050. 

  1050. 

    1051. 

  1051. 				}

    1052. 

  1052. 

    1053. 

  1053. 			} else {

    1054. 

  1054. 				// We don't have any posts, so we should just redirect to the no content page.

    1055. 

  1055. 				if(!empty($M_options['nocontent_page']) && !headers_sent()) {

    1056. 

  1056. 					// grab the content form the no content page

    1057. 

  1057. 					$url = get_permalink( (int) $M_options['nocontent_page'] );

    1058. 

  1058. 

    1059. 

  1059. 					wp_safe_redirect( $url );

    1060. 

  1060. 					exit;

    1061. 

  1061. 				} else {

    1062. 

  1062. 					return $posts;

    1063. 

  1063. 				}

    1064. 

  1064. 			}

    1065. 

  1065. 

    1066. 

  1066. 			// If we've reached here then something weird has happened :/

    1067. 

  1067. 			return $posts;

    1068. 

  1068. 

    1069. 

  1069. 			/*

    1070. 

  1070. 			if(!empty($wp_query->query_vars['protectedfile']) && !$forceviewing) {

    1071. 

  1071. 				return;

    1072. 

  1072. 			}

    1073. 

  1073. 			*/

    1074. 

  1074. 

    1075. 

  1075. 		}

    1076. 

  1076. 

    1077. 

  1077. 		function close_comments($open, $postid) {

    1078. 

  1078. 

    1079. 

  1079. 			return false;

    1080. 

  1080. 

    1081. 

  1081. 		}

    1082. 

  1082. 

    1083. 

  1083. 		// Content / downloads protection

    1084. 

  1084. 		function protect_download_content($the_content) {

    1085. 

  1085. 

    1086. 

  1086. 			global $M_options;

    1087. 

  1087. 

    1088. 

  1088. 			$origpath = membership_upload_url();

    1089. 

  1089. 			$newpath = trailingslashit(trailingslashit(get_option('home')) . $M_options['masked_url']);

    1090. 

  1090. 

    1091. 

  1091. 			// Find all the urls in the post and then we'll check if they are protected

    1092. 

  1092. 			/* Regular expression from http://blog.mattheworiordan.com/post/13174566389/url-regular-expression-for-links-with-or-without-the */

    1093. 

  1093. 

    1094. 

  1094. 			$url_exp = '/((([A-Za-z]{3,9}:(?:\/\/)?)(?:[-;:&=\+\$,\w]+@)?[A-Za-z0-9.-]+|(?:www.|[-;:&=\+\$,\w]+@)[A-Za-z0-9.-]+)((?:\/[\+~%\/.\w-_]*)?\??(?:[-\+=&;%@.\w_]*)#?(?:[.\!\/\\w]*))?)/';

    1095. 

  1095. 

    1096. 

  1096. 			$matches = array();

    1097. 

  1097. 			if(preg_match_all($url_exp, $the_content, $matches)) {

    1098. 

  1098. 				$home = get_option('home');

    1099. 

  1099. 				if(!empty($matches) && !empty($matches[2])) {

    1100. 

  1100. 

    1101. 

  1101. 					foreach((array) $matches[2] as $key => $domain) {

    1102. 

  1102. 						if(untrailingslashit($home) == untrailingslashit($domain)) {

    1103. 

  1103. 							$foundlocal = $key;

    1104. 

  1104. 							$file = basename($matches[4][$foundlocal]);

    1105. 

  1105. 

    1106. 

  1106. 							$filename_exp = '/(.+)\-(\d+[x]\d+)\.(.+)$/';

    1107. 

  1107. 							$filematch = array();

    1108. 

  1108. 							if(preg_match($filename_exp, $file, $filematch)) {

    1109. 

  1109. 								// We have an image with an image size attached

    1110. 

  1110. 								$newfile = $filematch[1] . "." . $filematch[3];

    1111. 

  1111. 								$size_extension = "-" . $filematch[2];

    1112. 

  1112. 							} else {

    1113. 

  1113. 								$newfile = $file;

    1114. 

  1114. 								$size_extension = '';

    1115. 

  1115. 							}

    1116. 

  1116. 

    1117. 

  1117. 							$sql = $this->db->prepare( "SELECT post_id FROM {$this->db->postmeta} WHERE meta_key = '_wp_attached_file' AND meta_value LIKE %s", '%' . $newfile . '%');

    1118. 

  1118. 							$post_id = $this->db->get_var( $sql );

    1119. 

  1119. 							if(empty($post_id)) {

    1120. 

  1120. 								// Can't find the file in the first pass, try the second pass.

    1121. 

  1121. 								$sql = $this->db->prepare( "SELECT post_id FROM {$this->db->postmeta} WHERE meta_key = '_wp_attachment_metadata' AND meta_value LIKE %s", '%' . $file . '%');

    1122. 

  1122. 								$post_id = $this->db->get_var( $sql );

    1123. 

  1123. 							}

    1124. 

  1124. 

    1125. 

  1125. 							if(!empty($post_id)) {

    1126. 

  1126. 								// Found the file and it's in the media library

    1127. 

  1127. 								$protected = get_post_meta( $post_id, '_membership_protected_content_group', true );

    1128. 

  1128. 

    1129. 

  1129. 								if(!empty($protected)) {

    1130. 

  1130. 									// We have a protected file - so we'll mask it

    1131. 

  1131. 									switch($M_options['protection_type']) {

    1132. 

  1132. 										case 'complete' :	$protectedfilename = MEMBERSHIP_FILE_NAME_PREFIX . ($post_id + (int) MEMBERSHIP_FILE_NAME_INCREMENT) . $size_extension;

    1133. 

  1133. 															$protectedfilename .= "." . pathinfo($newfile, PATHINFO_EXTENSION);

    1134. 

  1134. 

    1135. 

  1135. 															$the_content = str_replace( $matches[0][$foundlocal], $newpath . $protectedfilename, $the_content );

    1136. 

  1136. 															break;

    1137. 

  1137. 

    1138. 

  1138. 										case 'hybrid' :		$protectedfilename = MEMBERSHIP_FILE_NAME_PREFIX . ($post_id + (int) MEMBERSHIP_FILE_NAME_INCREMENT) . $size_extension;

    1139. 

  1139. 															$protectedfilename .= "." . pathinfo($newfile, PATHINFO_EXTENSION);

    1140. 

  1140. 

    1141. 

  1141. 															$the_content = str_replace( $matches[0][$foundlocal], $newpath . "?file=" . $protectedfilename, $the_content );

    1142. 

  1142. 															break;

    1143. 

  1143. 

    1144. 

  1144. 										case 'basic' :

    1145. 

  1145. 										default:			$the_content = str_replace( $matches[0][$foundlocal], str_replace( $origpath, $newpath, $matches[0][$foundlocal] ), $the_content );

    1146. 

  1146. 

    1147. 

  1147. 															break;

    1148. 

  1148. 									}

    1149. 

  1149. 								}

    1150. 

  1150. 							}

    1151. 

  1151. 

    1152. 

  1152. 						}

    1153. 

  1153. 					}

    1154. 

  1154. 				}

    1155. 

  1155. 

    1156. 

  1156. 			}

    1157. 

  1157. 

    1158. 

  1158. 			return $the_content;

    1159. 

  1159. 

    1160. 

  1160. 		}

    1161. 

  1161. 

    1162. 

  1162. 		// Shortcodes

    1163. 

  1163. 

    1164. 

  1164. 		function show_account_page( $content = null ) {

    1165. 

  1165. 

    1166. 

  1166. 			global $bp, $profileuser, $user, $user_id;

    1167. 

  1167. 

    1168. 

  1168. 			if(!is_user_logged_in()) {

    1169. 

  1169. 				return apply_filters('membership_account_form_not_logged_in', $content );

    1170. 

  1170. 			}

    1171. 

  1171. 

    1172. 

  1172. 			require_once(ABSPATH . 'wp-admin/includes/user.php');

    1173. 

  1173. 

    1174. 

  1174. 			$user = wp_get_current_user();

    1175. 

  1175. 

    1176. 

  1176. 			$user_id = $user->ID;

    1177. 

  1177. 

    1178. 

  1178. 			$profileuser = get_user_to_edit($user_id);

    1179. 

  1179. 

    1180. 

  1180. 			$content = '';

    1181. 

  1181. 

    1182. 

  1182. 			$content = apply_filters('membership_account_form_before_content', $content);

    1183. 

  1183. 

    1184. 

  1184. 			ob_start();

    1185. 

  1185. 			if( defined('MEMBERSHIP_ACCOUNT_FORM') && file_exists( MEMBERSHIP_ACCOUNT_FORM ) ) {

    1186. 

  1186. 				include_once( MEMBERSHIP_ACCOUNT_FORM );

    1187. 

  1187. 			} elseif(!empty($bp) && file_exists( apply_filters('membership_override_bpaccount_form', membership_dir('membershipincludes/includes/bp.account.form.php'), $user_id) )) {

    1188. 

  1188. 				include_once( apply_filters('membership_override_bpaccount_form', membership_dir('membershipincludes/includes/bp.account.form.php'), $user_id) );

    1189. 

  1189. 			} elseif( file_exists( apply_filters('membership_override_account_form', membership_dir('membershipincludes/includes/account.form.php'), $user_id) ) ) {

    1190. 

  1190. 				include_once( apply_filters('membership_override_account_form', membership_dir('membershipincludes/includes/account.form.php'), $user_id) );

    1191. 

  1191. 			}

    1192. 

  1192. 			$content .= ob_get_contents();

    1193. 

  1193. 			ob_end_clean();

    1194. 

  1194. 

    1195. 

  1195. 			$content = apply_filters('membership_account_form_after_content', $content, $user_id);

    1196. 

  1196. 

    1197. 

  1197. 			return $content;

    1198. 

  1198. 

    1199. 

  1199. 		}

    1200. 

  1200. 

    1201. 

  1201. 		function show_subpage_one($error = false) {

    1202. 

  1202. 

    1203. 

  1203. 			global $bp;

    1204. 

  1204. 

    1205. 

  1205. 			$content = '';

    1206. 

  1206. 

    1207. 

  1207. 			$content = apply_filters('membership_subscription_form_registration_before_content', $content, $error);

    1208. 

  1208. 

    1209. 

  1209. 			ob_start();

    1210. 

  1210. 			if( defined('MEMBERSHIP_REGISTRATION_FORM') && file_exists( MEMBERSHIP_REGISTRATION_FORM ) ) {

    1211. 

  1211. 				include_once( MEMBERSHIP_REGISTRATION_FORM );

    1212. 

  1212. 			} elseif(!empty($bp) && file_exists( apply_filters('membership_override_bpregistration_form', membership_dir('membershipincludes/includes/bp.registration.form.php'), $error) )) {

    1213. 

  1213. 				include_once( apply_filters('membership_override_bpregistration_form', membership_dir('membershipincludes/includes/bp.registration.form.php'), $error) );

    1214. 

  1214. 			} elseif( file_exists( apply_filters('membership_override_registration_form', membership_dir('membershipincludes/includes/registration.form.php'), $error) ) ) {

    1215. 

  1215. 				include_once( apply_filters('membership_override_registration_form', membership_dir('membershipincludes/includes/registration.form.php'), $error) );

    1216. 

  1216. 			}

    1217. 

  1217. 			$content .= ob_get_contents();

    1218. 

  1218. 			ob_end_clean();

    1219. 

  1219. 

    1220. 

  1220. 			$content = apply_filters('membership_subscription_form_registration_after_content', $content, $error);

    1221. 

  1221. 

    1222. 

  1222. 			return $content;

    1223. 

  1223. 

    1224. 

  1224. 		}

    1225. 

  1225. 

    1226. 

  1226. 		function show_subpage_two($user_id) {

    1227. 

  1227. 

    1228. 

  1228. 			$content = '';

    1229. 

  1229. 

    1230. 

  1230. 			$content = apply_filters('membership_subscription_form_before_content', $content, $user_id);

    1231. 

  1231. 

    1232. 

  1232. 			ob_start();

    1233. 

  1233. 			if( defined('MEMBERSHIP_SUBSCRIPTION_FORM') && file_exists( MEMBERSHIP_SUBSCRIPTION_FORM ) ) {

    1234. 

  1234. 				include_once( MEMBERSHIP_SUBSCRIPTION_FORM );

    1235. 

  1235. 			} elseif(file_exists( apply_filters('membership_override_subscription_form', membership_dir('membershipincludes/includes/subscription.form.php'), $user_id) ) ) {

    1236. 

  1236. 				include_once( apply_filters('membership_override_subscription_form', membership_dir('membershipincludes/includes/subscription.form.php'), $user_id) );

    1237. 

  1237. 			}

    1238. 

  1238. 			$content .= ob_get_contents();

    1239. 

  1239. 			ob_end_clean();

    1240. 

  1240. 

    1241. 

  1241. 			$content = apply_filters('membership_subscription_form_after_content', $content, $user_id );

    1242. 

  1242. 

    1243. 

  1243. 			return $content;

    1244. 

  1244. 

    1245. 

  1245. 		}

    1246. 

  1246. 

    1247. 

  1247. 		function show_subpage_member() {

    1248. 

  1248. 

    1249. 

  1249. 			$content = '';

    1250. 

  1250. 

    1251. 

  1251. 			$content = apply_filters('membership_subscription_form_member_before_content', $content, $user_id);

    1252. 

  1252. 

    1253. 

  1253. 			ob_start();

    1254. 

  1254. 			if( defined('MEMBERSHIP_MEMBER_FORM') && file_exists( MEMBERSHIP_MEMBER_FORM ) ) {

    1255. 

  1255. 				include_once( MEMBERSHIP_MEMBER_FORM );

    1256. 

  1256. 			} elseif(file_exists( apply_filters('membership_override_member_form', membership_dir('membershipincludes/includes/member.form.php')) )) {

    1257. 

  1257. 				include_once( apply_filters('membership_override_member_form', membership_dir('membershipincludes/includes/member.form.php')) );

    1258. 

  1258. 			}

    1259. 

  1259. 			$content .= ob_get_contents();

    1260. 

  1260. 			ob_end_clean();

    1261. 

  1261. 

    1262. 

  1262. 			$content = apply_filters('membership_subscription_form_member_after_content', $content, $user_id );

    1263. 

  1263. 

    1264. 

  1264. 			return $content;

    1265. 

  1265. 

    1266. 

  1266. 		}

    1267. 

  1267. 

    1268. 

  1268. 		function show_upgrade_page() {

    1269. 

  1269. 

    1270. 

  1270. 			$content = '';

    1271. 

  1271. 

    1272. 

  1272. 			$content = apply_filters('membership_upgrade_form_member_before_content', $content, $user_id);

    1273. 

  1273. 

    1274. 

  1274. 			ob_start();

    1275. 

  1275. 			if( defined('MEMBERSHIP_UPGRADE_FORM') && file_exists( MEMBERSHIP_UPGRADE_FORM ) ) {

    1276. 

  1276. 				include_once( MEMBERSHIP_UPGRADE_FORM );

    1277. 

  1277. 			} elseif(file_exists( apply_filters('membership_override_upgrade_form', membership_dir('membershipincludes/includes/upgrade.form.php')) )) {

    1278. 

  1278. 				include_once( apply_filters('membership_override_upgrade_form', membership_dir('membershipincludes/includes/upgrade.form.php')) );

    1279. 

  1279. 			}

    1280. 

  1280. 			$content .= ob_get_contents();

    1281. 

  1281. 			ob_end_clean();

    1282. 

  1282. 

    1283. 

  1283. 			$content = apply_filters('membership_upgrade_form_member_after_content', $content, $user_id );

    1284. 

  1284. 

    1285. 

  1285. 			return $content;

    1286. 

  1286. 

    1287. 

  1287. 		}

    1288. 

  1288. 

    1289. 

  1289. 		function show_renew_page( $user_id = false ) {

    1290. 

  1290. 

    1291. 

  1291. 			global $M_options;

    1292. 

  1292. 

    1293. 

  1293. 			$content = '';

    1294. 

  1294. 

    1295. 

  1295. 			$content = apply_filters('membership_renew_form_member_before_content', $content, $user_id);

    1296. 

  1296. 

    1297. 

  1297. 			ob_start();

    1298. 

  1298. 			if( defined('MEMBERSHIP_RENEW_FORM') && file_exists( MEMBERSHIP_RENEW_FORM ) ) {

    1299. 

  1299. 				include_once( MEMBERSHIP_RENEW_FORM );

    1300. 

  1300. 			} elseif(file_exists( apply_filters('membership_override_renew_form', membership_dir('membershipincludes/includes/renew.form.php')) )) {

    1301. 

  1301. 				include_once( apply_filters('membership_override_renew_form', membership_dir('membershipincludes/includes/renew.form.php')) );

    1302. 

  1302. 			}

    1303. 

  1303. 			$content .= ob_get_contents();

    1304. 

  1304. 			ob_end_clean();

    1305. 

  1305. 

    1306. 

  1306. 			$content = apply_filters('membership_renew_form_member_after_content', $content, $user_id );

    1307. 

  1307. 

    1308. 

  1308. 			return $content;

    1309. 

  1309. 

    1310. 

  1310. 		}

    1311. 

  1311. 

    1312. 

  1312. 		function do_renew_shortcode($atts, $content = null, $code = "") {

    1313. 

  1313. 

    1314. 

  1314. 			global $wp_query;

    1315. 

  1315. 

    1316. 

  1316. 			$error = array();

    1317. 

  1317. 

    1318. 

  1318. 			$page = addslashes($_REQUEST['action']);

    1319. 

  1319. 

    1320. 

  1320. 			$M_options = get_option('membership_options', array());

    1321. 

  1321. 

    1322. 

  1322. 			$content = $this->show_renew_page();

    1323. 

  1323. 

    1324. 

  1324. 			$content = apply_filters('membership_renew_form', $content);

    1325. 

  1325. 

    1326. 

  1326. 			return $content;

    1327. 

  1327. 

    1328. 

  1328. 		}

    1329. 

  1329. 

    1330. 

  1330. 		function do_upgrade_shortcode($atts, $content = null, $code = "") {

    1331. 

  1331. 

    1332. 

  1332. 			global $wp_query;

    1333. 

  1333. 

    1334. 

  1334. 			$error = array();

    1335. 

  1335. 

    1336. 

  1336. 			$page = addslashes($_REQUEST['action']);

    1337. 

  1337. 

    1338. 

  1338. 			$M_options = get_option('membership_options', array());

    1339. 

  1339. 

    1340. 

  1340. 			$content = $this->show_upgrade_page();

    1341. 

  1341. 

    1342. 

  1342. 			$content = apply_filters('membership_upgrade_form', $content);

    1343. 

  1343. 

    1344. 

  1344. 			return $content;

    1345. 

  1345. 

    1346. 

  1346. 		}

    1347. 

  1347. 

    1348. 

  1348. 		function do_account_shortcode($atts, $content = null, $code = "") {

    1349. 

  1349. 

    1350. 

  1350. 			global $wp_query;

    1351. 

  1351. 

    1352. 

  1352. 			$error = array();

    1353. 

  1353. 

    1354. 

  1354. 			$page = addslashes($_REQUEST['action']);

    1355. 

  1355. 

    1356. 

  1356. 			$M_options = get_option('membership_options', array());

    1357. 

  1357. 

    1358. 

  1358. 			$content = $this->show_account_page( $content );

    1359. 

  1359. 

    1360. 

  1360. 			$content = apply_filters('membership_account_form', $content);

    1361. 

  1361. 

    1362. 

  1362. 			return $content;

    1363. 

  1363. 

    1364. 

  1364. 		}

    1365. 

  1365. 

    1366. 

  1366. 		function do_account_form() {

    1367. 

  1367. 

    1368. 

  1368. 			global $wp_query, $M_options, $bp;

    1369. 

  1369. 

    1370. 

  1370. 			$content = $this->show_account_page();

    1371. 

  1371. 

    1372. 

  1372. 			return $content;

    1373. 

  1373. 

    1374. 

  1374. 		}

    1375. 

  1375. 

    1376. 

  1376. 

    1377. 

  1377. 		function do_renew_form() {

    1378. 

  1378. 			global $wp_query, $M_options, $bp;

    1379. 

  1379. 

    1380. 

  1380. 			$page = (isset($_REQUEST['action'])) ? addslashes($_REQUEST['action']) : '';

    1381. 

  1381. 			if(empty($page)) {

    1382. 

  1382. 				$page = 'renewform';

    1383. 

  1383. 			}

    1384. 

  1384. 

    1385. 

  1385. 			$content = '';

    1386. 

  1386. 

    1387. 

  1387. 			switch($page) {

    1388. 

  1388. 

    1389. 

  1389. 				case 'subscriptionsignup':

    1390. 

  1390. 											if(is_user_logged_in()) {

    1391. 

  1391. 

    1392. 

  1392. 												$member = current_member();

    1393. 

  1393. 												list($timestamp, $user_id, $sub_id, $key, $sublevel) = explode(':', $_POST['custom']);

    1394. 

  1394. 

    1395. 

  1395. 												if( wp_verify_nonce($_REQUEST['_wpnonce'], 'free-sub_' . $sub_id) ) {

    1396. 

  1396. 													$gateway = $_POST['gateway'];

    1397. 

  1397. 													// Join the new subscription

    1398. 

  1398. 													$member->create_subscription($sub_id, $gateway);

    1399. 

  1399. 													// Timestamp the update

    1400. 

  1400. 													update_user_meta( $user_id, '_membership_last_upgraded', time());

    1401. 

  1401. 												}

    1402. 

  1402. 											} else {

    1403. 

  1403. 												// check if a custom is posted and of so then process the user

    1404. 

  1404. 												if(isset($_POST['custom'])) {

    1405. 

  1405. 													list($timestamp, $user_id, $sub_id, $key, $sublevel) = explode(':', $_POST['custom']);

    1406. 

  1406. 

    1407. 

  1407. 													if( wp_verify_nonce($_REQUEST['_wpnonce'], 'free-sub_' . $sub_id) ) {

    1408. 

  1408. 														$gateway = $_POST['gateway'];

    1409. 

  1409. 														// Join the new subscription

    1410. 

  1410. 														$member = new M_Membership( $user_id );

    1411. 

  1411. 														$member->create_subscription($sub_id, $gateway);

    1412. 

  1412. 														// Timestamp the update

    1413. 

  1413. 														update_user_meta( $user_id, '_membership_last_upgraded', time());

    1414. 

  1414. 													}

    1415. 

  1415. 												}

    1416. 

  1416. 											}

    1417. 

  1417. 											$content = $this->show_renew_page();

    1418. 

  1418. 											break;

    1419. 

  1419. 

    1420. 

  1420. 				case 'renewform':

    1421. 

  1421. 				default:					// Just show the page

    1422. 

  1422. 											$content = $this->show_renew_page();

    1423. 

  1423. 											break;

    1424. 

  1424. 

    1425. 

  1425. 

    1426. 

  1426. 

    1427. 

  1427. 

    1428. 

  1428. 

    1429. 

  1429. 			}

    1430. 

  1430. 

    1431. 

  1431. 			return $content;

    1432. 

  1432. 		}

    1433. 

  1433. 

    1434. 

  1434. 		function output_subscriptionform() {

    1435. 

  1435. 

    1436. 

  1436. 			global $wp_query, $M_options, $bp;

    1437. 

  1437. 

    1438. 

  1438. 			if(empty($user_id)) {

    1439. 

  1439. 				$user = wp_get_current_user();

    1440. 

  1440. 

    1441. 

  1441. 				if(!empty($user->ID) && is_numeric($user->ID) ) {

    1442. 

  1442. 					$user_id = $user->ID;

    1443. 

  1443. 				} else {

    1444. 

  1444. 					$user_id = 0;

    1445. 

  1445. 				}

    1446. 

  1446. 			}

    1447. 

  1447. 

    1448. 

  1448. 			$content = apply_filters('membership_subscription_form_before_content', '', $user_id);

    1449. 

  1449. 			ob_start();

    1450. 

  1450. 			if( defined('MEMBERSHIP_SUBSCRIPTION_FORM') && file_exists( MEMBERSHIP_SUBSCRIPTION_FORM ) ) {

    1451. 

  1451. 				include_once( MEMBERSHIP_SUBSCRIPTION_FORM );

    1452. 

  1452. 			} elseif(file_exists( apply_filters('membership_override_subscription_form', membership_dir('membershipincludes/includes/subscription.form.php'), $user_id) ) ) {

    1453. 

  1453. 				include_once( apply_filters('membership_override_subscription_form', membership_dir('membershipincludes/includes/subscription.form.php'), $user_id) );

    1454. 

  1454. 			}

    1455. 

  1455. 			$content .= ob_get_contents();

    1456. 

  1456. 			ob_end_clean();

    1457. 

  1457. 

    1458. 

  1458. 			$content = apply_filters('membership_subscription_form_after_content', $content, $user_id );

    1459. 

  1459. 

    1460. 

  1460. 			return $content;

    1461. 

  1461. 		}

    1462. 

  1462. 

    1463. 

  1463. 		function output_registeruser( $error = false ) {

    1464. 

  1464. 

    1465. 

  1465. 			global $wp_query, $M_options, $bp;

    1466. 

  1466. 

    1467. 

  1467. 			$subscription = (int) $_GET['subscription'];

    1468. 

  1468. 			$content = apply_filters('membership_subscription_form_registration_before_content', '', $error);

    1469. 

  1469. 			ob_start();

    1470. 

  1470. 			if( defined('MEMBERSHIP_REGISTRATION_FORM') && file_exists( MEMBERSHIP_REGISTRATION_FORM ) ) {

    1471. 

  1471. 				include_once( MEMBERSHIP_REGISTRATION_FORM );

    1472. 

  1472. 			} elseif(!empty($bp) && file_exists( apply_filters('membership_override_bpregistration_form', membership_dir('membershipincludes/includes/bp.registration.form.php'), $error) )) {

    1473. 

  1473. 				include_once( apply_filters('membership_override_bpregistration_form', membership_dir('membershipincludes/includes/bp.registration.form.php'), $error) );

    1474. 

  1474. 			} elseif( file_exists( apply_filters('membership_override_registration_form', membership_dir('membershipincludes/includes/registration.form.php'), $error) ) ) {

    1475. 

  1475. 				include_once( apply_filters('membership_override_registration_form', membership_dir('membershipincludes/includes/registration.form.php'), $error) );

    1476. 

  1476. 			}

    1477. 

  1477. 			$content .= ob_get_contents();

    1478. 

  1478. 			ob_end_clean();

    1479. 

  1479. 

    1480. 

  1480. 			$content = apply_filters('membership_subscription_form_registration_after_content', $content, $error);

    1481. 

  1481. 

    1482. 

  1482. 			return $content;

    1483. 

  1483. 		}

    1484. 

  1484. 

    1485. 

  1485. 		function output_paymentpage( $user_id = false ) {

    1486. 

  1486. 

    1487. 

  1487. 			global $wp_query, $M_options;

    1488. 

  1488. 

    1489. 

  1489. 			$subscription = (int) $_REQUEST['subscription'];

    1490. 

  1490. 

    1491. 

  1491. 			if(!$user_id) {

    1492. 

  1492. 				$user = wp_get_current_user();

    1493. 

  1493. 

    1494. 

  1494. 				if(!empty($user->ID) && is_numeric($user->ID) ) {

    1495. 

  1495. 					$member = new M_Membership( $user->ID);

    1496. 

  1496. 				} else {

    1497. 

  1497. 					$member = current_member();

    1498. 

  1498. 				}

    1499. 

  1499. 			} else {

    1500. 

  1500. 				$member = new M_Membership( $user_id );

    1501. 

  1501. 			}

    1502. 

  1502. 

    1503. 

  1503. 			if(empty($error)) {

    1504. 

  1504. 				$error = '';

    1505. 

  1505. 			}

    1506. 

  1506. 

    1507. 

  1507. 			$content = apply_filters('membership_subscription_form_payment_before_content', '', $error);

    1508. 

  1508. 			ob_start();

    1509. 

  1509. 			if( defined('MEMBERSHIP_PAYMENT_FORM') && file_exists( MEMBERSHIP_PAYMENT_FORM ) ) {

    1510. 

  1510. 				include_once( MEMBERSHIP_PAYMENT_FORM );

    1511. 

  1511. 			} elseif( file_exists( apply_filters('membership_override_payment_form', membership_dir('membershipincludes/includes/payment.form.php'), $error) ) ) {

    1512. 

  1512. 				include_once( apply_filters('membership_override_payment_form', membership_dir('membershipincludes/includes/payment.form.php'), $error) );

    1513. 

  1513. 			}

    1514. 

  1514. 			$content .= ob_get_contents();

    1515. 

  1515. 			ob_end_clean();

    1516. 

  1516. 

    1517. 

  1517. 			$content = apply_filters('membership_subscription_form_payment_after_content', $content, $error);

    1518. 

  1518. 

    1519. 

  1519. 			return $content;

    1520. 

  1520. 

    1521. 

  1521. 		}

    1522. 

  1522. 

    1523. 

  1523. 		function do_subscription_form() {

    1524. 

  1524. 

    1525. 

  1525. 			global $wp_query, $M_options, $bp;

    1526. 

  1526. 

    1527. 

  1527. 			if(isset($_REQUEST['action'])) $page = addslashes($_REQUEST['action']);

    1528. 

  1528. 			if(empty($page)) {

    1529. 

  1529. 				$page = 'subscriptionform';

    1530. 

  1530. 			}

    1531. 

  1531. 

    1532. 

  1532. 			$content = '';

    1533. 

  1533. 

    1534. 

  1534. 			switch($page) {

    1535. 

  1535. 

    1536. 

  1536. 				case 'subscriptionform':	$content = $this->output_subscriptionform();

    1537. 

  1537. 											break;

    1538. 

  1538. 

    1539. 

  1539. 				case 'registeruser':		if(!is_user_logged_in()) {

    1540. 

  1540. 												$content = $this->output_registeruser();

    1541. 

  1541. 											} else {

    1542. 

  1542. 												$content = $this->output_paymentpage();

    1543. 

  1543. 											}

    1544. 

  1544. 											break;

    1545. 

  1545. 

    1546. 

  1546. 				case 'subscriptionsignup':	if(!is_user_logged_in()) {

    1547. 

  1547. 												$content = $this->output_registeruser();

    1548. 

  1548. 											} else {

    1549. 

  1549. 												$content = $this->output_paymentpage();

    1550. 

  1550. 											}

    1551. 

  1551. 											break;

    1552. 

  1552. 

    1553. 

  1553. 				case 'validatepage1':	// Page 1 of the form has been submitted - validate

    1554. 

  1554. 									//include_once(ABSPATH . WPINC . '/registration.php');

    1555. 

  1555. 

    1556. 

  1556. 									$required = array(	'user_login' => __('Username', 'membership'),

    1557. 

  1557. 														'user_email' => __('Email address','membership'),

    1558. 

  1558. 														'password' => __('Password','membership'),

    1559. 

  1559. 														'password2' => __('Password confirmation','membership'),

    1560. 

  1560. 													);

    1561. 

  1561. 

    1562. 

  1562. 									$error = new WP_Error();

    1563. 

  1563. 

    1564. 

  1564. 									foreach($required as $key => $message) {

    1565. 

  1565. 										if(empty($_POST[$key])) {

    1566. 

  1566. 											$error->add($key, __('Please ensure that the ', 'membership') . "<strong>" . $message . "</strong>" . __(' information is completed.','membership'));

    1567. 

  1567. 										}

    1568. 

  1568. 									}

    1569. 

  1569. 

    1570. 

  1570. 									if($_POST['password'] != $_POST['password2']) {

    1571. 

  1571. 										$error->add('passmatch', __('Please ensure the passwords match.','membership'));

    1572. 

  1572. 									}

    1573. 

  1573. 

    1574. 

  1574. 									if(username_exists(sanitize_user($_POST['user_login']))) {

    1575. 

  1575. 										$error->add('usernameexists', __('That username is already taken, sorry.','membership'));

    1576. 

  1576. 									}

    1577. 

  1577. 

    1578. 

  1578. 									if(email_exists($_POST['user_email'])) {

    1579. 

  1579. 										$error->add('emailexists', __('That email address is already taken, sorry.','membership'));

    1580. 

  1580. 									}

    1581. 

  1581. 

    1582. 

  1582. 									$error = apply_filters( 'membership_subscription_form_before_registration_process', $error );

    1583. 

  1583. 

    1584. 

  1584. 									$result = array('user_name' => $_POST['user_login'], 'orig_username' => $_POST['user_login'], 'user_email' => $_POST['user_email'], 'errors' => $error);

    1585. 

  1585. 

    1586. 

  1586. 									$result = apply_filters('wpmu_validate_user_signup', $result);

    1587. 

  1587. 

    1588. 

  1588. 									$error = $result['errors'];

    1589. 

  1589. 

    1590. 

  1590. 									// Hack for now - eeek

    1591. 

  1591. 									$anyerrors = $error->get_error_code();

    1592. 

  1592. 									if( empty($anyerrors) ) {

    1593. 

  1593. 										// No errors so far - error reporting check for final add user *note $error should always be an error object becuase we created it as such.

    1594. 

  1594. 										$user_id = wp_create_user( sanitize_user($_POST['user_login']), $_POST['password'], $_POST['user_email'] );

    1595. 

  1595. 

    1596. 

  1596. 										if(is_wp_error($user_id) && method_exists($userid, 'get_error_message')) {

    1597. 

  1597. 											$error->add('userid', $user_id->get_error_message());

    1598. 

  1598. 										} else {

    1599. 

  1599. 											$member = new M_Membership( $user_id );

    1600. 

  1600. 

    1601. 

  1601. 											if(defined('MEMBERSHIP_DEACTIVATE_USER_ON_REGISTRATION') && MEMBERSHIP_DEACTIVATE_USER_ON_REGISTRATION == true) {

    1602. 

  1602. 												$member->deactivate();

    1603. 

  1603. 											} else {

    1604. 

  1604. 												$creds = array(

    1605. 

  1605. 													'user_login' => $_POST['user_login'],

    1606. 

  1606. 													'user_password' => $_POST['password'],

    1607. 

  1607. 													'remember' => true

    1608. 

  1608. 												);

    1609. 

  1609. 												$is_ssl = (isset($_SERVER['https']) && strtolower($_SERVER['https']) == 'on' ? true : false);

    1610. 

  1610. 												$user = wp_signon( $creds, $is_ssl );

    1611. 

  1611. 

    1612. 

  1612. 												if ( is_wp_error($user) && method_exists($user, 'get_error_message') ) {

    1613. 

  1613. 													$error->add('userlogin', $user->get_error_message());

    1614. 

  1614. 												} else {

    1615. 

  1615. 													// Set the current user up

    1616. 

  1616. 													wp_set_current_user( $user_id );

    1617. 

  1617. 												}

    1618. 

  1618. 											}

    1619. 

  1619. 

    1620. 

  1620. 											if( has_action('membership_susbcription_form_registration_notification') ) {

    1621. 

  1621. 												do_action('membership_susbcription_form_registration_notification', $user_id, $_POST['password']);

    1622. 

  1622. 											} else {

    1623. 

  1623. 												wp_new_user_notification($user_id, $_POST['password']);

    1624. 

  1624. 											}

    1625. 

  1625. 

    1626. 

  1626. 										}

    1627. 

  1627. 

    1628. 

  1628. 										do_action( 'membership_subscription_form_registration_process', $error, $user_id );

    1629. 

  1629. 

    1630. 

  1630. 									} else {

    1631. 

  1631. 										do_action( 'membership_subscription_form_registration_process', $error, 0 );

    1632. 

  1632. 									}

    1633. 

  1633. 

    1634. 

  1634. 									// Hack for now - eeek

    1635. 

  1635. 									$anyerrors = $error->get_error_code();

    1636. 

  1636. 									if( !empty($anyerrors) ) {

    1637. 

  1637. 										// we have an error - output

    1638. 

  1638. 										// Show the page again so that it can display the errors

    1639. 

  1639. 										$content = $this->output_registeruser( $error );

    1640. 

  1640. 

    1641. 

  1641. 									} else {

    1642. 

  1642. 										$content = $this->output_paymentpage( $user_id );

    1643. 

  1643. 									}

    1644. 

  1644. 

    1645. 

  1645. 									break;

    1646. 

  1646. 

    1647. 

  1647. 				case 'validatepage1bp':

    1648. 

  1648. 									global $bp;

    1649. 

  1649. 

    1650. 

  1650. 									//include_once(ABSPATH . WPINC . '/registration.php');

    1651. 

  1651. 

    1652. 

  1652. 									$required = array(	'signup_username' => __('Username', 'membership'),

    1653. 

  1653. 														'signup_email' => __('Email address','membership'),

    1654. 

  1654. 														'signup_password' => __('Password','membership'),

    1655. 

  1655. 														'signup_password_confirm' => __('Password confirmation','membership'),

    1656. 

  1656. 													);

    1657. 

  1657. 

    1658. 

  1658. 									$error = new WP_Error();

    1659. 

  1659. 

    1660. 

  1660. 									foreach($required as $key => $message) {

    1661. 

  1661. 										if(empty($_POST[$key])) {

    1662. 

  1662. 											$error->add($key, __('Please ensure that the ', 'membership') . "<strong>" . $message . "</strong>" . __(' information is completed.','membership'));

    1663. 

  1663. 										}

    1664. 

  1664. 									}

    1665. 

  1665. 

    1666. 

  1666. 									if($_POST['signup_password'] != $_POST['signup_password_confirm']) {

    1667. 

  1667. 										$error->add('passmatch', __('Please ensure the passwords match.','membership'));

    1668. 

  1668. 									}

    1669. 

  1669. 

    1670. 

  1670. 									if(username_exists(sanitize_user($_POST['signup_username']))) {

    1671. 

  1671. 										$error->add('usernameexists', __('That username is already taken, sorry.','membership'));

    1672. 

  1672. 									}

    1673. 

  1673. 

    1674. 

  1674. 									if(email_exists($_POST['signup_email'])) {

    1675. 

  1675. 										$error->add('emailexists', __('That email address is already taken, sorry.','membership'));

    1676. 

  1676. 									}

    1677. 

  1677. 

    1678. 

  1678. 									// Initial fix provided by user: cmurtagh - modified to add extra checks and rejigged a bit

    1679. 

  1679. 									// Run the buddypress validation

    1680. 

  1680. 									do_action( 'bp_signup_validate' );

    1681. 

  1681. 

    1682. 

  1682. 							        // Add any errors to the action for the field in the template for display.

    1683. 

  1683.         							if ( !empty( $bp->signup->errors ) ) {

    1684. 

  1684. 										foreach ( (array)$bp->signup->errors as $fieldname => $error_message ) {

    1685. 

  1685. 												$error->add($fieldname, $error_message);

    1686. 

  1686. 										}

    1687. 

  1687. 									}

    1688. 

  1688. 

    1689. 

  1689. 									$meta_array = array();

    1690. 

  1690. 

    1691. 

  1691. 									// xprofile required fields

    1692. 

  1692. 									/* Now we've checked account details, we can check profile information */

    1693. 

  1693. 									//if ( function_exists( 'xprofile_check_is_required_field' ) ) {

    1694. 

  1694. 									if ( function_exists('bp_is_active') && bp_is_active( 'xprofile' ) ) {

    1695. 

  1695. 

    1696. 

  1696. 										/* Make sure hidden field is passed and populated */

    1697. 

  1697. 										if ( isset( $_POST['signup_profile_field_ids'] ) && !empty( $_POST['signup_profile_field_ids'] ) ) {

    1698. 

  1698. 

    1699. 

  1699. 											/* Let's compact any profile field info into an array */

    1700. 

  1700. 											$profile_field_ids = explode( ',', $_POST['signup_profile_field_ids'] );

    1701. 

  1701. 

    1702. 

  1702. 											/* Loop through the posted fields formatting any datebox values then validate the field */

    1703. 

  1703. 											foreach ( (array) $profile_field_ids as $field_id ) {

    1704. 

  1704. 												if ( !isset( $_POST['field_' . $field_id] ) ) {

    1705. 

  1705. 													if ( isset( $_POST['field_' . $field_id . '_day'] ) )

    1706. 

  1706. 														$_POST['field_' . $field_id] = strtotime( $_POST['field_' . $field_id . '_day'] . $_POST['field_' . $field_id . '_month'] . $_POST['field_' . $field_id . '_year'] );

    1707. 

  1707. 												}

    1708. 

  1708. 

    1709. 

  1709. 												/* Create errors for required fields without values */

    1710. 

  1710. 												if ( xprofile_check_is_required_field( $field_id ) && empty( $_POST['field_' . $field_id] ) ) {

    1711. 

  1711. 													$field = new BP_Xprofile_Field( $field_id );

    1712. 

  1712. 													$error->add($field->name, __('Please ensure that the ', 'membership') . "<strong>" . $field->name . "</strong>" . __(' information is completed.','membership'));

    1713. 

  1713. 												}

    1714. 

  1714. 

    1715. 

  1715. 												$meta_array[ $field_id ] = $_POST['field_' . $field_id];

    1716. 

  1716. 											}

    1717. 

  1717. 

    1718. 

  1718. 										}

    1719. 

  1719. 									}

    1720. 

  1720. 

    1721. 

  1721. 									$error = apply_filters( 'membership_subscription_form_before_registration_process', $error );

    1722. 

  1722. 

    1723. 

  1723. 									// Hack for now - eeek

    1724. 

  1724. 									$anyerrors = $error->get_error_code();

    1725. 

  1725. 									if( empty($anyerrors) ) {

    1726. 

  1726. 										// No errors so far - error reporting check for final add user *note $error should always be an error object becuase we created it as such.

    1727. 

  1727. 										$user_id = wp_create_user( sanitize_user($_POST['signup_username']), $_POST['signup_password'], $_POST['signup_email'] );

    1728. 

  1728. 

    1729. 

  1729. 										if(is_wp_error($user_id) && method_exists($userid, 'get_error_message')) {

    1730. 

  1730. 											$error->add('userid', $user_id->get_error_message());

    1731. 

  1731. 										} else {

    1732. 

  1732. 											$member = new M_Membership( $user_id );

    1733. 

  1733. 											if(defined('MEMBERSHIP_DEACTIVATE_USER_ON_REGISTRATION') && MEMBERSHIP_DEACTIVATE_USER_ON_REGISTRATION == true) {

    1734. 

  1734. 												$member->deactivate();

    1735. 

  1735. 											} else {

    1736. 

  1736. 												$creds = array(

    1737. 

  1737. 													'user_login' => $_POST['signup_username'],

    1738. 

  1738. 													'user_password' => $_POST['signup_password'],

    1739. 

  1739. 													'remember' => true

    1740. 

  1740. 												);

    1741. 

  1741. 												$is_ssl = (isset($_SERVER['https']) && strtolower($_SERVER['https']) == 'on' ? true : false);

    1742. 

  1742. 												$user = wp_signon( $creds, $is_ssl );

    1743. 

  1743. 

    1744. 

  1744. 												if ( is_wp_error($user) && method_exists($user, 'get_error_message') ) {

    1745. 

  1745. 													$error->add('userlogin', $user->get_error_message());

    1746. 

  1746. 												} else {

    1747. 

  1747. 													// Set the current user up

    1748. 

  1748. 													wp_set_current_user( $user_id );

    1749. 

  1749. 												}

    1750. 

  1750. 											}

    1751. 

  1751. 

    1752. 

  1752. 											if( has_action('membership_susbcription_form_registration_notification') ) {

    1753. 

  1753. 												do_action('membership_susbcription_form_registration_notification', $user_id, $_POST['signup_password']);

    1754. 

  1754. 											} else {

    1755. 

  1755. 												wp_new_user_notification($user_id, $_POST['signup_password']);

    1756. 

  1756. 											}

    1757. 

  1757. 

    1758. 

  1758. 											// Add the bp filter for usermeta signup

    1759. 

  1759. 											$meta_array = apply_filters( 'bp_signup_usermeta', $meta_array );

    1760. 

  1760. 

    1761. 

  1761. 											foreach((array) $meta_array as $field_id => $field_content) {

    1762. 

  1762. 												if(function_exists('xprofile_set_field_data')) {

    1763. 

  1763. 													xprofile_set_field_data( $field_id, $user_id, $field_content );

    1764. 

  1764. 												}

    1765. 

  1765. 											}

    1766. 

  1766. 

    1767. 

  1767. 										}

    1768. 

  1768. 

    1769. 

  1769. 										do_action( 'membership_subscription_form_registration_process', $error, $user_id );

    1770. 

  1770. 									} else {

    1771. 

  1771. 										do_action( 'membership_subscription_form_registration_process', $error, 0 );

    1772. 

  1772. 									}

    1773. 

  1773. 

    1774. 

  1774. 									// Hack for now - eeek

    1775. 

  1775. 									$anyerrors = $error->get_error_code();

    1776. 

  1776. 									if(!empty($anyerrors)) {

    1777. 

  1777. 										// Show the page so that it can display the errors

    1778. 

  1778. 										$content = $this->output_registeruser( $error );

    1779. 

  1779. 									} else {

    1780. 

  1780. 										// everything seems fine (so far), so we have our queued user so let's

    1781. 

  1781. 										// run the bp complete signup action

    1782. 

  1782. 										do_action( 'bp_complete_signup' );

    1783. 

  1783. 										// display the payment forms

    1784. 

  1784. 										$content = $this->output_paymentpage( $user_id );

    1785. 

  1785. 									}

    1786. 

  1786. 

    1787. 

  1787. 									break;

    1788. 

  1788. 

    1789. 

  1789. 

    1790. 

  1790. 

    1791. 

  1791. 			}

    1792. 

  1792. 

    1793. 

  1793. 			return $content;

    1794. 

  1794. 

    1795. 

  1795. 		}

    1796. 

  1796. 

    1797. 

  1797. 		function do_subscription_shortcode($atts, $content = null, $code = "") {

    1798. 

  1798. 

    1799. 

  1799. 			global $wp_query;

    1800. 

  1800. 

    1801. 

  1801. 			return $this->do_subscription_form();

    1802. 

  1802. 

    1803. 

  1803. 		}

    1804. 

  1804. 

    1805. 

  1805. 

    1806. 

  1806. 		function do_subscriptiontitle_shortcode($atts, $content = null, $code = "") {

    1807. 

  1807. 

    1808. 

  1808. 			global $wp_query;

    1809. 

  1809. 

    1810. 

  1810. 			$defaults = array(	"holder"				=>	'',

    1811. 

  1811. 								"holderclass"			=>	'',

    1812. 

  1812. 								"item"					=>	'',

    1813. 

  1813. 								"itemclass"				=>	'',

    1814. 

  1814. 								"postfix"				=>	'',

    1815. 

  1815. 								"prefix"				=>	'',

    1816. 

  1816. 								"wrapwith"				=>	'',

    1817. 

  1817. 								"wrapwithclass"			=>	'',

    1818. 

  1818. 								"subscription"			=>	''

    1819. 

  1819. 							);

    1820. 

  1820. 

    1821. 

  1821. 			extract(shortcode_atts($defaults, $atts));

    1822. 

  1822. 

    1823. 

  1823. 			if(empty($subscription)) {

    1824. 

  1824. 				return '';

    1825. 

  1825. 			}

    1826. 

  1826. 

    1827. 

  1827. 			if(!empty($holder)) {

    1828. 

  1828. 				$html .= "<{$holder} class='{$holderclass}'>";

    1829. 

  1829. 			}

    1830. 

  1830. 			if(!empty($item)) {

    1831. 

  1831. 				$html .= "<{$item} class='{$itemclass}'>";

    1832. 

  1832. 			}

    1833. 

  1833. 			$html .= $prefix;

    1834. 

  1834. 

    1835. 

  1835. 			// The title

    1836. 

  1836. 			if(!empty($wrapwith)) {

    1837. 

  1837. 				$html .= "<{$wrapwith} class='{$wrapwithclass}'>";

    1838. 

  1838. 			}

    1839. 

  1839. 

    1840. 

  1840. 			$sub = new M_Subscription( (int) $subscription );

    1841. 

  1841. 			$html .= $sub->sub_name();

    1842. 

  1842. 

    1843. 

  1843. 			if(!empty($wrapwith)) {

    1844. 

  1844. 				$html .= "</{$wrapwith}>";

    1845. 

  1845. 			}

    1846. 

  1846. 

    1847. 

  1847. 			$html .= $postfix;

    1848. 

  1848. 			if(!empty($item)) {

    1849. 

  1849. 				$html .= "</{$item}>";

    1850. 

  1850. 			}

    1851. 

  1851. 			if(!empty($holder)) {

    1852. 

  1852. 				$html .= "</{$holder}>";

    1853. 

  1853. 			}

    1854. 

  1854. 

    1855. 

  1855. 

    1856. 

  1856. 			return $html;

    1857. 

  1857. 		}

    1858. 

  1858. 

    1859. 

  1859. 		function do_subscriptiondetails_shortcode($atts, $content = null, $code = "") {

    1860. 

  1860. 

    1861. 

  1861. 			global $wp_query;

    1862. 

  1862. 

    1863. 

  1863. 			$defaults = array(	"holder"				=>	'',

    1864. 

  1864. 								"holderclass"			=>	'',

    1865. 

  1865. 								"item"					=>	'',

    1866. 

  1866. 								"itemclass"				=>	'',

    1867. 

  1867. 								"postfix"				=>	'',

    1868. 

  1868. 								"prefix"				=>	'',

    1869. 

  1869. 								"wrapwith"				=>	'',

    1870. 

  1870. 								"wrapwithclass"			=>	'',

    1871. 

  1871. 								"subscription"			=>	''

    1872. 

  1872. 							);

    1873. 

  1873. 

    1874. 

  1874. 			extract(shortcode_atts($defaults, $atts));

    1875. 

  1875. 

    1876. 

  1876. 			if(empty($subscription)) {

    1877. 

  1877. 				return '';

    1878. 

  1878. 			}

    1879. 

  1879. 

    1880. 

  1880. 			if(!empty($holder)) {

    1881. 

  1881. 				$html .= "<{$holder} class='{$holderclass}'>";

    1882. 

  1882. 			}

    1883. 

  1883. 			if(!empty($item)) {

    1884. 

  1884. 				$html .= "<{$item} class='{$itemclass}'>";

    1885. 

  1885. 			}

    1886. 

  1886. 			$html .= $prefix;

    1887. 

  1887. 

    1888. 

  1888. 			// The title

    1889. 

  1889. 			if(!empty($wrapwith)) {

    1890. 

  1890. 				$html .= "<{$wrapwith} class='{$wrapwithclass}'>";

    1891. 

  1891. 			}

    1892. 

  1892. 

    1893. 

  1893. 			$sub = new M_Subscription( (int) $subscription );

    1894. 

  1894. 			$html .= stripslashes($sub->sub_description());

    1895. 

  1895. 

    1896. 

  1896. 			if(!empty($wrapwith)) {

    1897. 

  1897. 				$html .= "</{$wrapwith}>";

    1898. 

  1898. 			}

    1899. 

  1899. 

    1900. 

  1900. 			$html .= $postfix;

    1901. 

  1901. 			if(!empty($item)) {

    1902. 

  1902. 				$html .= "</{$item}>";

    1903. 

  1903. 			}

    1904. 

  1904. 			if(!empty($holder)) {

    1905. 

  1905. 				$html .= "</{$holder}>";

    1906. 

  1906. 			}

    1907. 

  1907. 

    1908. 

  1908. 			return $html;

    1909. 

  1909. 		}

    1910. 

  1910. 

    1911. 

  1911. 		function do_subscriptionprice_shortcode($atts, $content = null, $code = "") {

    1912. 

  1912. 

    1913. 

  1913. 			global $wp_query;

    1914. 

  1914. 

    1915. 

  1915. 			$defaults = array(	"holder"				=>	'',

    1916. 

  1916. 								"holderclass"			=>	'',

    1917. 

  1917. 								"item"					=>	'',

    1918. 

  1918. 								"itemclass"				=>	'',

    1919. 

  1919. 								"postfix"				=>	'',

    1920. 

  1920. 								"prefix"				=>	'',

    1921. 

  1921. 								"wrapwith"				=>	'',

    1922. 

  1922. 								"wrapwithclass"			=>	'',

    1923. 

  1923. 								"subscription"			=>	''

    1924. 

  1924. 							);

    1925. 

  1925. 

    1926. 

  1926. 			extract(shortcode_atts($defaults, $atts));

    1927. 

  1927. 

    1928. 

  1928. 			if(empty($subscription)) {

    1929. 

  1929. 				return '';

    1930. 

  1930. 			}

    1931. 

  1931. 

    1932. 

  1932. 			if(!empty($holder)) {

    1933. 

  1933. 				$html .= "<{$holder} class='{$holderclass}'>";

    1934. 

  1934. 			}

    1935. 

  1935. 			if(!empty($item)) {

    1936. 

  1936. 				$html .= "<{$item} class='{$itemclass}'>";

    1937. 

  1937. 			}

    1938. 

  1938. 			$html .= $prefix;

    1939. 

  1939. 

    1940. 

  1940. 			// The title

    1941. 

  1941. 			if(!empty($wrapwith)) {

    1942. 

  1942. 				$html .= "<{$wrapwith} class='{$wrapwithclass}'>";

    1943. 

  1943. 			}

    1944. 

  1944. 

    1945. 

  1945. 			$sub = new M_Subscription( (int) $subscription );

    1946. 

  1946. 			$first = $sub->get_level_at_position(1);

    1947. 

  1947. 

    1948. 

  1948. 			if(!empty($first)) {

    1949. 

  1949. 				$price = $first->level_price;

    1950. 

  1950. 				if($price == 0) {

    1951. 

  1951. 					$price = "Free";

    1952. 

  1952. 				} else {

    1953. 

  1953. 

    1954. 

  1954. 					$M_options = get_option('membership_options', array());

    1955. 

  1955. 

    1956. 

  1956. 					switch( $M_options['paymentcurrency'] ) {

    1957. 

  1957. 						case "USD": $price = "$" . $price;

    1958. 

  1958. 									break;

    1959. 

  1959. 

    1960. 

  1960. 						case "GBP":	$price = "&pound;" . $price;

    1961. 

  1961. 									break;

    1962. 

  1962. 

    1963. 

  1963. 						case "EUR":	$price = "&euro;" . $price;

    1964. 

  1964. 									break;

    1965. 

  1965. 

    1966. 

  1966. 						default:	$price = apply_filters('membership_currency_symbol_' . $M_options['paymentcurrency'], $M_options['paymentcurrency']) . $price;

    1967. 

  1967. 					}

    1968. 

  1968. 				}

    1969. 

  1969. 			}

    1970. 

  1970. 

    1971. 

  1971. 

    1972. 

  1972. 			$html .= $price;

    1973. 

  1973. 

    1974. 

  1974. 			if(!empty($wrapwith)) {

    1975. 

  1975. 				$html .= "</{$wrapwith}>";

    1976. 

  1976. 			}

    1977. 

  1977. 

    1978. 

  1978. 			$html .= $postfix;

    1979. 

  1979. 			if(!empty($item)) {

    1980. 

  1980. 				$html .= "</{$item}>";

    1981. 

  1981. 			}

    1982. 

  1982. 			if(!empty($holder)) {

    1983. 

  1983. 				$html .= "</{$holder}>";

    1984. 

  1984. 			}

    1985. 

  1985. 

    1986. 

  1986. 			return $html;

    1987. 

  1987. 		}

    1988. 

  1988. 

    1989. 

  1989. 		function do_subscriptionbutton_shortcode($atts, $content = null, $code = "") {

    1990. 

  1990. 

    1991. 

  1991. 			global $wp_query;

    1992. 

  1992. 

    1993. 

  1993. 			$defaults = array(	"holder"				=>	'',

    1994. 

  1994. 								"holderclass"			=>	'',

    1995. 

  1995. 								"item"					=>	'',

    1996. 

  1996. 								"itemclass"				=>	'',

    1997. 

  1997. 								"postfix"				=>	'',

    1998. 

  1998. 								"prefix"				=>	'',

    1999. 

  1999. 								"wrapwith"				=>	'',

    2000. 

  2000. 								"wrapwithclass"			=>	'',

    2001. 

  2001. 								"subscription"			=>	'',

    2002. 

  2002. 								"color"					=>	'blue'

    2003. 

  2003. 							);

    2004. 

  2004. 

    2005. 

  2005. 			extract(shortcode_atts($defaults, $atts));

    2006. 

  2006. 

    2007. 

  2007. 			$link = admin_url( 'admin-ajax.php' );

    2008. 

  2008. 			$link .= '?action=buynow&amp;subscription=' . (int) $subscription;

    2009. 

  2009. 

    2010. 

  2010. 			if(empty($content)) {

    2011. 

  2011. 				$content = __('Subscribe', 'membership');

    2012. 

  2012. 			}

    2013. 

  2013. 

    2014. 

  2014. 			$html = "<a href='" . $link . "' class='popover button " . $color . "'>" . $content . "</a>";

    2015. 

  2015. 

    2016. 

  2016. 			//$html = do_shortcode("[button class='popover' link='{$link}']Buy Now[/button]");

    2017. 

  2017. 

    2018. 

  2018. 

    2019. 

  2019. 			return $html;

    2020. 

  2020. 		}

    2021. 

  2021. 

    2022. 

  2022. 		function create_the_user_and_notify() {

    2023. 

  2023. 			//$user_id = wp_create_user(sanitize_user($_POST['user_login']), $_POST['password'], $_POST['user_email']);

    2024. 

  2024. 			//wp_new_user_notification( $user_id, $_POST['password'] );

    2025. 

  2025. 		}

    2026. 

  2026. 

    2027. 

  2027. 		function check_for_membership_pages($posts) {

    2028. 

  2028. 

    2029. 

  2029. 			global $M_options;

    2030. 

  2030. 

    2031. 

  2031. 			if(count($posts) == 1) {

    2032. 

  2032. 				// We have only the one post, so check if it's one of our pages

    2033. 

  2033. 				$post = $posts[0];

    2034. 

  2034. 				if($post->post_type == 'page') {

    2035. 

  2035. 					if($post->ID == $M_options['registration_page']) {

    2036. 

  2036. 						// check if page contains a shortcode

    2037. 

  2037. 						if(strstr($post->post_content, '[subscriptionform]') !== false) {

    2038. 

  2038. 							// There is content in there with the shortcode so just return it

    2039. 

  2039. 							return $posts;

    2040. 

  2040. 						} else {

    2041. 

  2041. 							// registration page found - add in the styles

    2042. 

  2042. 							if(!current_theme_supports('membership_subscription_form')) {

    2043. 

  2043. 								wp_enqueue_style('subscriptionformcss', membership_url('membershipincludes/css/subscriptionform.css'));

    2044. 

  2044. 								wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2045. 

  2045. 								wp_enqueue_style('buttoncss', membership_url('membershipincludes/css/buttons.css'));

    2046. 

  2046. 

    2047. 

  2047. 								if($M_options['formtype'] == 'new') {

    2048. 

  2048. 									// pop up registration form

    2049. 

  2049. 									wp_enqueue_style('fancyboxcss', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.css'));

    2050. 

  2050. 									wp_enqueue_script('fancyboxjs', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.pack.js'), array('jquery'), false, true);

    2051. 

  2051. 

    2052. 

  2052. 									wp_enqueue_script('popupmemjs', membership_url('membershipincludes/js/popupregistration.js'), array('jquery'), false, true);

    2053. 

  2053. 									wp_enqueue_style('popupmemcss', membership_url('membershipincludes/css/popupregistration.css'));

    2054. 

  2054. 

    2055. 

  2055. 									wp_localize_script('popupmemjs', 'membership', array(	'ajaxurl'	=>	admin_url( 'admin-ajax.php' ),

    2056. 

  2056. 									 														'registernonce'	=>	wp_create_nonce('membership_register'),

    2057. 

  2057. 																							'loginnonce'	=>	wp_create_nonce('membership_login'),

    2058. 

  2058. 																							'regproblem'	=>	__('Problem with registration.', 'membership'),

    2059. 

  2059. 																							'logpropblem'	=>	__('Problem with Login.', 'membership'),

    2060. 

  2060. 																							'regmissing'	=>	__('Please ensure you have completed all the fields','membership'),

    2061. 

  2061. 																							'regnomatch'	=>	__('Please ensure passwords match', 'membership'),

    2062. 

  2062. 																							'logmissing'	=>	__('Please ensure you have entered an username or password','membership')

    2063. 

  2063. 																						));

    2064. 

  2064. 								}

    2065. 

  2065. 							}

    2066. 

  2066. 

    2067. 

  2067. 							do_action('membership_subscriptionbutton_onpage');

    2068. 

  2068. 							// There is no shortcode content in there, so override

    2069. 

  2069. 							remove_filter( 'the_content', 'wpautop' );

    2070. 

  2070. 							$post->post_content = $this->do_subscription_form();

    2071. 

  2071. 						}

    2072. 

  2072. 					}

    2073. 

  2073. 					if($post->ID == $M_options['account_page']) {

    2074. 

  2074. 						// account page - check if page contains a shortcode

    2075. 

  2075. 						if(strstr($post->post_content, '[accountform]') !== false || strstr($post->post_content, '[upgradeform]') !== false || strstr($post->post_content, '[renewform]') !== false) {

    2076. 

  2076. 							// There is content in there with the shortcode so just return it

    2077. 

  2077. 							return $posts;

    2078. 

  2078. 						} else {

    2079. 

  2079. 							// account page found - add in the styles

    2080. 

  2080. 							if(!current_theme_supports('membership_account_form')) {

    2081. 

  2081. 								wp_enqueue_style('accountformcss', membership_url('membershipincludes/css/accountform.css'));

    2082. 

  2082. 								wp_enqueue_script('accountformjs', membership_url('membershipincludes/js/accountform.js'), array('jquery'));

    2083. 

  2083. 

    2084. 

  2084. 								wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2085. 

  2085. 								wp_enqueue_style('buttoncss', membership_url('membershipincludes/css/buttons.css'));

    2086. 

  2086. 							}

    2087. 

  2087. 							// There is no shortcode in there, so override

    2088. 

  2088. 							remove_filter( 'the_content', 'wpautop' );

    2089. 

  2089. 							$post->post_content = $this->do_account_form();

    2090. 

  2090. 						}

    2091. 

  2091. 					}

    2092. 

  2092. 					if($post->ID == $M_options['subscriptions_page']) {

    2093. 

  2093. 

    2094. 

  2094. 						// Handle any updates passed

    2095. 

  2095. 						$page = isset($_REQUEST['action']) ? addslashes($_REQUEST['action']) : '';

    2096. 

  2096. 						if(empty($page)) {

    2097. 

  2097. 							$page = 'renewform';

    2098. 

  2098. 						}

    2099. 

  2099. 

    2100. 

  2100. 						switch($page) {

    2101. 

  2101. 							case 'subscriptionsignup':	if(is_user_logged_in()) {

    2102. 

  2102. 															$member = current_member();

    2103. 

  2103. 															list($timestamp, $user_id, $sub_id, $key, $sublevel) = explode(':', $_POST['custom']);

    2104. 

  2104. 

    2105. 

  2105. 															if( wp_verify_nonce($_REQUEST['_wpnonce'], 'free-sub_' . $sub_id) ) {

    2106. 

  2106. 																$gateway = $_POST['gateway'];

    2107. 

  2107. 																// Join the new subscription

    2108. 

  2108. 																$member->create_subscription($sub_id, $gateway);

    2109. 

  2109. 																do_action('membership_payment_subscr_signup', $user_id, $sub_id);

    2110. 

  2110. 																// Timestamp the update

    2111. 

  2111. 																update_user_meta( $user_id, '_membership_last_upgraded', time());

    2112. 

  2112. 

    2113. 

  2113. 																// Added another redirect to the same url because the show_no_access filters

    2114. 

  2114. 																// have already run on the "parse_request" action (Cole)

    2115. 

  2115. 																wp_redirect(M_get_subscription_permalink());

    2116. 

  2116. 																exit;

    2117. 

  2117. 															}

    2118. 

  2118. 														} else {

    2119. 

  2119. 															// check if a custom is posted and of so then process the user

    2120. 

  2120. 															if(isset($_POST['custom'])) {

    2121. 

  2121. 																list($timestamp, $user_id, $sub_id, $key, $sublevel) = explode(':', $_POST['custom']);

    2122. 

  2122. 

    2123. 

  2123. 																if( wp_verify_nonce($_REQUEST['_wpnonce'], 'free-sub_' . $sub_id) ) {

    2124. 

  2124. 																	$gateway = $_POST['gateway'];

    2125. 

  2125. 																	// Join the new subscription

    2126. 

  2126. 																	$member = new M_Membership( $user_id );

    2127. 

  2127. 																	$member->create_subscription($sub_id, $gateway);

    2128. 

  2128. 																	do_action('membership_payment_subscr_signup', $user_id, $sub_id);

    2129. 

  2129. 																	// Timestamp the update

    2130. 

  2130. 																	update_user_meta( $user_id, '_membership_last_upgraded', time());

    2131. 

  2131. 

    2132. 

  2132. 																	// Added another redirect to the same url because the show_no_access filters

    2133. 

  2133. 																	// have already run on the "parse_request" action (Cole)

    2134. 

  2134. 																	wp_redirect(M_get_subscription_permalink());

    2135. 

  2135. 																	exit;

    2136. 

  2136. 																}

    2137. 

  2137. 															}

    2138. 

  2138. 														}

    2139. 

  2139. 														break;

    2140. 

  2140. 

    2141. 

  2141. 							default:

    2142. 

  2142. 														break;

    2143. 

  2143. 						}

    2144. 

  2144. 

    2145. 

  2145. 						// account page - check if page contains a shortcode

    2146. 

  2146. 						if(strstr($post->post_content, '[upgradeform]') !== false || strstr($post->post_content, '[renewform]') !== false) {

    2147. 

  2147. 							// There is content in there with the shortcode so just return it

    2148. 

  2148. 							return $posts;

    2149. 

  2149. 						} else {

    2150. 

  2150. 							// account page found - add in the styles

    2151. 

  2151. 							if(!current_theme_supports('membership_account_form')) {

    2152. 

  2152. 								wp_enqueue_style('subscriptionformcss', membership_url('membershipincludes/css/subscriptionform.css'));

    2153. 

  2153. 								wp_enqueue_style('upgradeformcss', membership_url('membershipincludes/css/upgradeform.css'));

    2154. 

  2154. 								wp_enqueue_style('renewformcss', membership_url('membershipincludes/css/renewform.css'));

    2155. 

  2155. 								wp_enqueue_script('renewformjs', membership_url('membershipincludes/js/renewform.js'), array('jquery'));

    2156. 

  2156. 								wp_localize_script( 'renewformjs', 'membership', array( 'unsubscribe' => __('Are you sure you want to unsubscribe from this subscription?','membership'), 'deactivatelevel' => __('Are you sure you want to deactivate this level?','membership') ) );

    2157. 

  2157. 

    2158. 

  2158. 								wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2159. 

  2159. 								wp_enqueue_style('buttoncss', membership_url('membershipincludes/css/buttons.css'));

    2160. 

  2160. 

    2161. 

  2161. 								if($M_options['formtype'] == 'new') {

    2162. 

  2162. 									// pop up registration form

    2163. 

  2163. 									wp_enqueue_style('fancyboxcss', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.css'));

    2164. 

  2164. 									wp_enqueue_script('fancyboxjs', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.pack.js'), array('jquery'), false, true);

    2165. 

  2165. 

    2166. 

  2166. 									wp_enqueue_script('popupmemjs', membership_url('membershipincludes/js/popupregistration.js'), array('jquery'), false, true);

    2167. 

  2167. 									wp_enqueue_style('popupmemcss', membership_url('membershipincludes/css/popupregistration.css'));

    2168. 

  2168. 

    2169. 

  2169. 									wp_localize_script('popupmemjs', 'membership', array(	'ajaxurl'	=>	admin_url( 'admin-ajax.php' ),

    2170. 

  2170. 									 														'registernonce'	=>	wp_create_nonce('membership_register'),

    2171. 

  2171. 																							'loginnonce'	=>	wp_create_nonce('membership_login'),

    2172. 

  2172. 																							'regproblem'	=>	__('Problem with registration.', 'membership'),

    2173. 

  2173. 																							'logpropblem'	=>	__('Problem with Login.', 'membership'),

    2174. 

  2174. 																							'regmissing'	=>	__('Please ensure you have completed all the fields','membership'),

    2175. 

  2175. 																							'regnomatch'	=>	__('Please ensure passwords match', 'membership'),

    2176. 

  2176. 																							'logmissing'	=>	__('Please ensure you have entered an username or password','membership')

    2177. 

  2177. 																						));

    2178. 

  2178. 								}

    2179. 

  2179. 

    2180. 

  2180. 							}

    2181. 

  2181. 							// There is no shortcode in there, so override

    2182. 

  2182. 							remove_filter( 'the_content', 'wpautop' );

    2183. 

  2183. 							$post->post_content = $this->do_renew_form();

    2184. 

  2184. 						}

    2185. 

  2185. 					}

    2186. 

  2186. 					if($post->ID == $M_options['nocontent_page']) {

    2187. 

  2187. 						// no access page - we must return the content entered by the user so just return it

    2188. 

  2188. 						return $posts;

    2189. 

  2189. 					}

    2190. 

  2190. 					// Registration complete page

    2191. 

  2191. 					if($post->ID == $M_options['registrationcompleted_page']) {

    2192. 

  2192. 

    2193. 

  2193. 						// Handle any updates passed

    2194. 

  2194. 						if(isset($_REQUEST['action']) && !empty($_REQUEST['action'])) {

    2195. 

  2195. 							$page = addslashes($_REQUEST['action']);

    2196. 

  2196. 						} else {

    2197. 

  2197. 							$page = 'renewform';

    2198. 

  2198. 						}

    2199. 

  2199. 

    2200. 

  2200. 						switch($page) {

    2201. 

  2201. 							case 'subscriptionsignup':

    2202. 

  2202. 														if(is_user_logged_in() && isset($_POST['custom'])) {

    2203. 

  2203. 															list($timestamp, $user_id, $sub_id, $key, $sublevel) = explode(':', $_POST['custom']);

    2204. 

  2204. 

    2205. 

  2205. 															if( wp_verify_nonce($_REQUEST['_wpnonce'], 'free-sub_' . $sub_id) ) {

    2206. 

  2206. 

    2207. 

  2207. 																$member = current_member();

    2208. 

  2208. 

    2209. 

  2209. 																$gateway = $_POST['gateway'];

    2210. 

  2210. 																// Join the new subscription

    2211. 

  2211. 																$member->create_subscription($sub_id, $gateway);

    2212. 

  2212. 																do_action('membership_payment_subscr_signup', $user_id, $sub_id);

    2213. 

  2213. 																// Timestamp the update

    2214. 

  2214. 																update_user_meta( $user_id, '_membership_last_upgraded', time());

    2215. 

  2215. 

    2216. 

  2216. 																// Added another redirect to the same url because the show_no_access filters

    2217. 

  2217. 																// have already run on the "parse_request" action (Cole)

    2218. 

  2218. 																wp_redirect(M_get_returnurl_permalink());

    2219. 

  2219. 																exit;

    2220. 

  2220. 															} else {

    2221. 

  2221. 

    2222. 

  2222. 															}

    2223. 

  2223. 

    2224. 

  2224. 														} else {

    2225. 

  2225. 															// check if a custom is posted and of so then process the user

    2226. 

  2226. 															if(isset($_POST['custom'])) {

    2227. 

  2227. 																list($timestamp, $user_id, $sub_id, $key, $sublevel) = explode(':', $_POST['custom']);

    2228. 

  2228. 

    2229. 

  2229. 																if( wp_verify_nonce($_REQUEST['_wpnonce'], 'free-sub_' . $sub_id) ) {

    2230. 

  2230. 

    2231. 

  2231. 																	$gateway = $_POST['gateway'];

    2232. 

  2232. 																	// Join the new subscription

    2233. 

  2233. 																	$member = new M_Membership( $user_id );

    2234. 

  2234. 																	$member->create_subscription($sub_id, $gateway);

    2235. 

  2235. 																	do_action('membership_payment_subscr_signup', $user_id, $sub_id);

    2236. 

  2236. 																	// Timestamp the update

    2237. 

  2237. 																	update_user_meta( $user_id, '_membership_last_upgraded', time());

    2238. 

  2238. 

    2239. 

  2239. 																	// Added another redirect to the same url because the show_no_access filters

    2240. 

  2240. 																	// have already run on the "parse_request" action (Cole)

    2241. 

  2241. 																	wp_redirect(M_get_returnurl_permalink());

    2242. 

  2242. 																	exit;

    2243. 

  2243. 																}

    2244. 

  2244. 															}

    2245. 

  2245. 														}

    2246. 

  2246. 														break;

    2247. 

  2247. 						}

    2248. 

  2248. 

    2249. 

  2249. 						return $posts;

    2250. 

  2250. 					}

    2251. 

  2251. 

    2252. 

  2252. 				}

    2253. 

  2253. 			}

    2254. 

  2254. 			// If nothing else is hit, just return the content

    2255. 

  2255. 			return $posts;

    2256. 

  2256. 		}

    2257. 

  2257. 

    2258. 

  2258. 		function add_subscription_styles($posts) {

    2259. 

  2259. 

    2260. 

  2260. 			foreach($posts as $key => $post) {

    2261. 

  2261. 				if(strstr($post->post_content, '[subscriptionform]') !== false) {

    2262. 

  2262. 					// The shortcode is in a post on this page, add the header

    2263. 

  2263. 					if(!current_theme_supports('membership_subscription_form')) {

    2264. 

  2264. 						wp_enqueue_style('subscriptionformcss', membership_url('membershipincludes/css/subscriptionform.css'));

    2265. 

  2265. 						wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2266. 

  2266. 						wp_enqueue_style('fancyboxcss', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.css'));

    2267. 

  2267. 						wp_enqueue_script('fancyboxjs', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.pack.js'), array('jquery'), false, true);

    2268. 

  2268. 

    2269. 

  2269. 						wp_enqueue_script('popupmemjs', membership_url('membershipincludes/js/popupregistration.js'), array('jquery'), false, true);

    2270. 

  2270. 						wp_enqueue_style('popupmemcss', membership_url('membershipincludes/css/popupregistration.css'));

    2271. 

  2271. 

    2272. 

  2272. 						wp_enqueue_style('buttoncss', membership_url('membershipincludes/css/buttons.css'));

    2273. 

  2273. 

    2274. 

  2274. 						wp_localize_script('popupmemjs', 'membership', array(	'ajaxurl'	=>	admin_url( 'admin-ajax.php' ),

    2275. 

  2275. 						 														'registernonce'	=>	wp_create_nonce('membership_register'),

    2276. 

  2276. 																				'loginnonce'	=>	wp_create_nonce('membership_login'),

    2277. 

  2277. 																				'regproblem'	=>	__('Problem with registration.', 'membership'),

    2278. 

  2278. 																				'logpropblem'	=>	__('Problem with Login.', 'membership'),

    2279. 

  2279. 																				'regmissing'	=>	__('Please ensure you have completed all the fields','membership'),

    2280. 

  2280. 																				'regnomatch'	=>	__('Please ensure passwords match', 'membership'),

    2281. 

  2281. 																				'logmissing'	=>	__('Please ensure you have entered an username or password','membership')

    2282. 

  2282. 																			));

    2283. 

  2283. 

    2284. 

  2284. 					}

    2285. 

  2285. 				}

    2286. 

  2286. 				if(strstr($post->post_content, '[accountform]') !== false) {

    2287. 

  2287. 					// The shortcode is in a post on this page, add the header

    2288. 

  2288. 					if(!current_theme_supports('membership_account_form')) {

    2289. 

  2289. 						wp_enqueue_style('accountformcss', membership_url('membershipincludes/css/accountform.css'));

    2290. 

  2290. 						wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2291. 

  2291. 						wp_enqueue_script('accountformjs', membership_url('membershipincludes/js/accountform.js'), array('jquery'));

    2292. 

  2292. 					}

    2293. 

  2293. 				}

    2294. 

  2294. 				if(strstr($post->post_content, '[upgradeform]') !== false) {

    2295. 

  2295. 					// The shortcode is in a post on this page, add the header

    2296. 

  2296. 					if(!current_theme_supports('membership_account_form')) {

    2297. 

  2297. 						wp_enqueue_style('upgradeformcss', membership_url('membershipincludes/css/upgradeform.css'));

    2298. 

  2298. 						wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2299. 

  2299. 					}

    2300. 

  2300. 				}

    2301. 

  2301. 				if(strstr($post->post_content, '[renewform]') !== false) {

    2302. 

  2302. 					// The shortcode is in a post on this page, add the header

    2303. 

  2303. 					if(!current_theme_supports('membership_account_form')) {

    2304. 

  2304. 						wp_enqueue_style('renewformcss', membership_url('membershipincludes/css/renewform.css'));

    2305. 

  2305. 						wp_enqueue_style('publicformscss', membership_url('membershipincludes/css/publicforms.css'));

    2306. 

  2306. 						wp_enqueue_script('renewformjs', membership_url('membershipincludes/js/renewform.js'), array('jquery'));

    2307. 

  2307. 						wp_localize_script( 'renewformjs', 'membership', array( 'unsubscribe' => __('Are you sure you want to unsubscribe from this subscription?','membership'), 'deactivatelevel' => __('Are you sure you want to deactivate this level?','membership') ) );

    2308. 

  2308. 					}

    2309. 

  2309. 				}

    2310. 

  2310. 

    2311. 

  2311. 				// New subscription styles

    2312. 

  2312. 				if(strstr($post->post_content, '[subscriptiontitle') !== false) {

    2313. 

  2313. 					do_action('membership_subscriptiontitle_onpage');

    2314. 

  2314. 				}

    2315. 

  2315. 

    2316. 

  2316. 				if(strstr($post->post_content, '[subscriptiondetails') !== false) {

    2317. 

  2317. 					do_action('membership_subscriptiondetails_onpage');

    2318. 

  2318. 				}

    2319. 

  2319. 

    2320. 

  2320. 				if(strstr($post->post_content, '[subscriptionbutton') !== false) {

    2321. 

  2321. 					// The shortcode is in a post on this page, add the header

    2322. 

  2322. 					if(!current_theme_supports('membership_subscription_form')) {

    2323. 

  2323. 						wp_enqueue_style('fancyboxcss', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.css'));

    2324. 

  2324. 						wp_enqueue_script('fancyboxjs', membership_url('membershipincludes/js/fancybox/jquery.fancybox-1.3.4.pack.js'), array('jquery'), false, true);

    2325. 

  2325. 

    2326. 

  2326. 						wp_enqueue_script('popupmemjs', membership_url('membershipincludes/js/popupregistration.js'), array('jquery'), false, true);

    2327. 

  2327. 						wp_enqueue_style('popupmemcss', membership_url('membershipincludes/css/popupregistration.css'));

    2328. 

  2328. 

    2329. 

  2329. 						wp_enqueue_style('buttoncss', membership_url('membershipincludes/css/buttons.css'));

    2330. 

  2330. 

    2331. 

  2331. 						wp_localize_script('popupmemjs', 'membership', array(	'ajaxurl'	=>	admin_url( 'admin-ajax.php' ),

    2332. 

  2332. 						 														'registernonce'	=>	wp_create_nonce('membership_register'),

    2333. 

  2333. 																				'loginnonce'	=>	wp_create_nonce('membership_login'),

    2334. 

  2334. 																				'regproblem'	=>	__('Problem with registration.', 'membership'),

    2335. 

  2335. 																				'logpropblem'	=>	__('Problem with Login.', 'membership'),

    2336. 

  2336. 																				'regmissing'	=>	__('Please ensure you have completed all the fields','membership'),

    2337. 

  2337. 																				'regnomatch'	=>	__('Please ensure passwords match', 'membership'),

    2338. 

  2338. 																				'logmissing'	=>	__('Please ensure you have entered an username or password','membership')

    2339. 

  2339. 																			));

    2340. 

  2340. 					}

    2341. 

  2341. 					do_action('membership_subscriptionbutton_onpage');

    2342. 

  2342. 

    2343. 

  2343. 					//wp_enqueue_style('upgradeformcss', membership_url('membershipincludes/css/upgradeform.css'));

    2344. 

  2344. 				}

    2345. 

  2345. 

    2346. 

  2346. 				if(strstr($post->post_content, '[subscriptionprice') !== false) {

    2347. 

  2347. 					do_action('membership_subscriptionprice_onpage');

    2348. 

  2348. 				}

    2349. 

  2349. 			}

    2350. 

  2350. 

    2351. 

  2351. 			return $posts;

    2352. 

  2352. 

    2353. 

  2353. 		}

    2354. 

  2354. 

    2355. 

  2355. 		function pending_username_exists( $username, $email ) {

    2356. 

  2356. 

    2357. 

  2357. 			// Initial delete of pending subscriptions

    2358. 

  2358. 			$sql = $this->db->prepare( "DELETE FROM {$this->user_queue} WHERE user_timestamp < %d", strtotime('-3 hours') );

    2359. 

  2359. 			$this->db->query( $sql );

    2360. 

  2360. 

    2361. 

  2361. 			// Now check for a pending username that doesn't have the same email address

    2362. 

  2362. 			$sql = $this->db->prepare( "SELECT id FROM {$this->user_queue} WHERE user_login = %s AND user_email != %s LIMIT 0,1", $username, $email );

    2363. 

  2363. 

    2364. 

  2364. 			$res = $this->db->get_var( $sql );

    2365. 

  2365. 			if(!empty($res)) {

    2366. 

  2366. 				return true;

    2367. 

  2367. 			} else {

    2368. 

  2368. 				// because even though the username could exist - if the email address is the same it could just be that they hit the back button.

    2369. 

  2369. 				return false;

    2370. 

  2370. 			}

    2371. 

  2371. 

    2372. 

  2372. 		}

    2373. 

  2373. 

    2374. 

  2374. 		function queue_user( $user_login, $user_pass, $user_email, $user_meta = '' ) {

    2375. 

  2375. 

    2376. 

  2376. 			$sql = "INSERT INTO {$this->user_queue} (user_login, user_pass, user_email, user_timestamp, user_meta) VALUES ";

    2377. 

  2377. 			$sql .= $this->db->prepare( "( %s, %s, %s, %d, %s )", $user_login, wp_hash_password( $user_pass ), $user_email, time(), serialize($user_meta) );

    2378. 

  2378. 			$sql .= $this->db->prepare( " ON DUPLICATE KEY UPDATE user_timestamp = %d", time());

    2379. 

  2379. 

    2380. 

  2380. 			if( $this->db->query( $sql ) ) {

    2381. 

  2381. 				return $this->db->insert_id;

    2382. 

  2382. 			} else {

    2383. 

  2383. 				return new WP_Error('queueerror', __('Could not create your user account.', 'membership'));

    2384. 

  2384. 			}

    2385. 

  2385. 

    2386. 

  2386. 

    2387. 

  2387. 		}

    2388. 

  2388. 

    2389. 

  2389. 		//db stuff

    2390. 

  2390. 		function get_subscriptions() {

    2391. 

  2391. 

    2392. 

  2392. 			$where = array();

    2393. 

  2393. 			$orderby = array();

    2394. 

  2394. 

    2395. 

  2395. 			$where[] = "sub_public = 1";

    2396. 

  2396. 			$where[] = "sub_active = 1";

    2397. 

  2397. 

    2398. 

  2398. 			$orderby[] = 'id ASC';

    2399. 

  2399. 

    2400. 

  2400. 			$sql = "SELECT * FROM {$this->subscriptions}";

    2401. 

  2401. 

    2402. 

  2402. 			if(!empty($where)) {

    2403. 

  2403. 				$sql .= " WHERE " . implode(' AND ', $where);

    2404. 

  2404. 			}

    2405. 

  2405. 

    2406. 

  2406. 			if(!empty($orderby)) {

    2407. 

  2407. 				$sql .= " ORDER BY " . implode(', ', $orderby);

    2408. 

  2408. 			}

    2409. 

  2409. 

    2410. 

  2410. 			return $this->db->get_results($sql);

    2411. 

  2411. 

    2412. 

  2412. 		}

    2413. 

  2413. 

    2414. 

  2414. 		function get_levels() {

    2415. 

  2415. 

    2416. 

  2416. 			$where = array();

    2417. 

  2417. 			$orderby = array();

    2418. 

  2418. 

    2419. 

  2419. 			$where[] = "level_active = 1";

    2420. 

  2420. 

    2421. 

  2421. 			$orderby[] = 'id ASC';

    2422. 

  2422. 

    2423. 

  2423. 			$sql = "SELECT * FROM {$this->membership_levels}";

    2424. 

  2424. 

    2425. 

  2425. 			if(!empty($where)) {

    2426. 

  2426. 				$sql .= " WHERE " . implode(' AND ', $where);

    2427. 

  2427. 			}

    2428. 

  2428. 

    2429. 

  2429. 			if(!empty($orderby)) {

    2430. 

  2430. 				$sql .= " ORDER BY " . implode(', ', $orderby);

    2431. 

  2431. 			}

    2432. 

  2432. 

    2433. 

  2433. 			return $this->db->get_results($sql);

    2434. 

  2434. 

    2435. 

  2435. 		}

    2436. 

  2436. 

    2437. 

  2437. 		// Level shortcodes function

    2438. 

  2438. 		function build_level_shortcode_list( $shortcodes = array() ) {

    2439. 

  2439. 

    2440. 

  2440. 			if(!is_array($shortcodes)) {

    2441. 

  2441. 				$shortcodes = array();

    2442. 

  2442. 			}

    2443. 

  2443. 

    2444. 

  2444. 			$levels = $this->get_levels();

    2445. 

  2445. 

    2446. 

  2446. 			if(!empty($levels)) {

    2447. 

  2447. 				foreach($levels as $level) {

    2448. 

  2448. 					$shortcodes[$level->id] = M_normalize_shortcode($level->level_title);

    2449. 

  2449. 				}

    2450. 

  2450. 			}

    2451. 

  2451. 

    2452. 

  2452. 			return $shortcodes;

    2453. 

  2453. 

    2454. 

  2454. 		}

    2455. 

  2455. 

    2456. 

  2456. 		function build_not_level_shortcode_list( $shortcodes = array() ) {

    2457. 

  2457. 

    2458. 

  2458. 			if(!is_array($shortcodes)) {

    2459. 

  2459. 				$shortcodes = array();

    2460. 

  2460. 			}

    2461. 

  2461. 

    2462. 

  2462. 			$levels = $this->get_levels();

    2463. 

  2463. 

    2464. 

  2464. 			if(!empty($levels)) {

    2465. 

  2465. 				foreach($levels as $level) {

    2466. 

  2466. 					$shortcodes[$level->id] = 'not-' . M_normalize_shortcode($level->level_title);

    2467. 

  2467. 				}

    2468. 

  2468. 			}

    2469. 

  2469. 

    2470. 

  2470. 			return $shortcodes;

    2471. 

  2471. 

    2472. 

  2472. 		}

    2473. 

  2473. 

    2474. 

  2474. 	}

    2475. 

  2475. 

    2476. 

  2476. }

    2477. 

  2477. ?>
    2478.